Processing of your data
These parties may process your data while delivering and supporting the service. Document content, storage, AI processing and monitoring stay inside the EEA.
| Name | Location | Service | Transfer mechanism |
|---|---|---|---|
| Microsoft Azure | Amsterdam (Netherlands), Sweden | Cloud, hosting, AI processing, geo-redundancy | Not applicable, within the EEA |
| Google Cloud | Eemshaven, Netherlands | AI processing | Not applicable, within the EEA |
| Vercel | EU-West | Frontend hosting, DDoS protection | Not applicable, within the EEA |
| Datadog | Netherlands | Monitoring and logging | Not applicable, within the EEA |
| ClickHouse | Frankfurt (Germany), San Francisco (United States) | Real-time analytics | EU-US Data Privacy Framework |
| Linear | European Union | Project and issue tracking, including customer onboarding and support requests | EU data residency; SCCs for US access |
Internal operations
We use this for our own way of working. No document content goes to it. It is listed because a note can contain a contact person's name or email address, and we would rather keep this list too complete than too narrow.
| Name | Location | Service | Transfer mechanism |
|---|---|---|---|
| Notion | Oregon, United States | Internal notes and documentation | Standard contractual clauses (SCCs) |
Changes and right to object
We notify you before engaging a new subprocessor or replacing an existing one. You may object in writing with reasons within ten working days of notification, on reasonable privacy or security grounds. If we cannot resolve it together, we will not make the change or we will offer a reasonable alternative. We contractually impose on every subprocessor obligations that are materially equivalent to our own data processing agreement, and we remain liable to you for their performance.
Stay informed
Want notice of every change to this list? Email security@chainfill.ai and we will add you to the notification list.
security@chainfill.aiTransfers outside the EEA
Chainfill processes personal data within the European Economic Area by preference. Hosting, storage, AI processing and monitoring of your documents stay inside the EEA. The parties that process (partly) outside the EEA are named above with their transfer mechanism. Where data may leave the EEA we apply an appropriate transfer mechanism such as an adequacy decision or the EU standard contractual clauses, with supplementary measures where needed.