Sub-processors

List last changed .

When Copyl AB processes personal data on behalf of a customer, it uses the sub-processors below. Each one is bound by a data processing agreement with Copyl AB.

The column "Where data is processed" shows where each provider processes the data. Some providers process data outside the EU/EEA; the transfer basis column shows the safeguard that applies to those transfers.

Copyl engages these sub-processors under its Data Processing Agreement with customers, which also describes how changes to this list are announced and how to object. Read the Data Processing Agreement (DPA). Copyl Privacy Policy.

This list is generated from Copyl AB's contract register each time the website is built. It is not edited by hand.

Copyl AB's sub-processors
Provider and servicePurposeData categoriesWhere data is processedTransfer basisListed since
Anthropic PBCAnthropic API (Claude)AI language models (Claude) that run Copyl's AI agents and assistants
  • Prompts with customer content
  • Model outputs
  • Global (default) or US
  • storage US
  • no EU option
EU SCCs Modules 2/3 incorporated in Anthropic DPA
ElevenLabs IncElevenLabs (speech)Text-to-speech and transcription of recorded meetings
  • Meeting audio and transcripts
  • Text for speech
  • US (default)
EU-US DPF; EU SCCs per ElevenLabs DPA
Google LLCGemini APIAI language models (Gemini) for Copyl's AI agents, including the bookkeeping agents
  • Prompts with customer documents and business data
  • Model outputs
  • Global (any country with Google facilities)
  • no EU residency on the Gemini API
EU-US DPF (Google LLC); EU SCCs fallback in Google DPA
Microsoft Ireland Operations LtdAzure OpenAIAI language models hosted in Microsoft Azure for Copyl's AI agents
  • Prompts with customer documents and business data
  • Model outputs
  • West Europe (EU) resource
  • Global deployments may process outside the EU
As Microsoft Azure: EU SCCs in DPA; EU Data Boundary for Standard/DataZone EU deployments
Microsoft Ireland Operations LtdMicrosoft AzureHosting of the Copyl platform: applications, databases, file storage and messaging
  • All customer content and account data
  • Logs
  • Sweden Central (EU)
  • West Europe (EU)
EU/EEA processing; EU Data Boundary; EU SCCs in Product Terms/DPA (Microsoft Corp also EU-US DPF)
OpenAI Ireland LtdOpenAI APIAI language models and real-time voice for Copyl's AI assistants and agents
  • Prompts with customer content
  • Audio (realtime)
  • Model outputs
  • Global/US (default project)
EU SCCs or adequacy per OpenAI DPA s.4.1
Stripe Payments Europe LtdStripeSubscription billing and card payments
  • Billing contact
  • Payment and transaction data
  • Global incl. US (Stripe, LLC)
EU-US DPF (Stripe, LLC); EU SCCs Modules 1-3
Twilio Inc (SendGrid)Twilio SendGridDelivery of transactional and notification e-mail
  • Recipient names and e-mail addresses
  • E-mail content
  • US (global subuser)
  • EU residency not configured
EU-US DPF (Twilio Inc); EU SCCs deemed signed

Change history

Sub-processors added to, changed on or removed from this list, newest first.

DateChangeSub-processorReason
AddedAnthropic PBC · Anthropic API (Claude)–
AddedElevenLabs Inc · ElevenLabs (speech)–
AddedGoogle LLC · Gemini API–
AddedMicrosoft Ireland Operations Ltd · Azure OpenAI–
AddedMicrosoft Ireland Operations Ltd · Microsoft Azure–
AddedOpenAI Ireland Ltd · OpenAI API–
AddedStripe Payments Europe Ltd · Stripe–
AddedTwilio Inc (SendGrid) · Twilio SendGrid–

Questions

Questions about a sub-processor, or about how your data is processed, can be sent to support@copyl.com.

Copyl AB