Feature-dependent providers used to process entrusted customer data
Register date: 4 September 2026 • Associated with DPA version 1.2
A provider is used only for a feature actively selected by the customer. Entrusted data may be transferred only after the required Article 28 GDPR agreement, any required international-transfer mechanism, and the provider-specific training, retention and security evidence have been documented. The DPA and the register version recorded with the contract remain authoritative.
| Provider | Service | Location / condition |
|---|---|---|
| IONOS Cloud GmbH | Hosting, compute, storage, monitoring; optional AI inference | Frankfurt or Berlin, Germany |
| IONOS SE | Transactional email delivery | Germany / EU |
| STACKIT GmbH & Co. KG | Optional AI inference | Germany South / EU01 |
| Mistral AI SAS | AI inference, audio transcription, native web search | Global endpoint; DPA/SCC and training opt-out required |
| Microsoft Ireland Operations Ltd. | Optional Azure AI inference | Germany / Sweden |
| Amazon Web Services EMEA SARL | Optional Bedrock inference and image generation | eu-central-1; model-dependent EU target regions |
| Google Cloud EMEA Limited | Optional Vertex AI/Gemini inference and image generation | europe-west1 |
| Perplexity AI, Inc. | Optional Sonar inference with web research | USA; valid transfer mechanism and transfer assessment required |
| StackOne Technologies Limited | Optional connectors | EU1 / UK and customer-selected destination systems |
| Linkup Technologies SAS | Optional web search and URL retrieval | EU; blocked for entrusted personal data until the complete approval evidence exists |
Intended new or replacement subprocessors are notified in text form to the privacy or contract contact recorded in the customer account or agreement at least 30 calendar days before planned use. A reasoned data-protection objection may be sent within 14 calendar days to kontakt@franco-consulting.com. The new provider receives no entrusted data until notice has been delivered, the period has expired and approval is documented.