Subprocessors
Last updated: 23 September 2026
Subprocessors
Getia AS uses the following third-party service providers (subprocessors) to help deliver our services. All subprocessors are bound by data processing agreements and comply with applicable data protection laws.
| Subprocessor | Purpose | Location | Transfer Mechanism | DPA | GDPR |
|---|---|---|---|---|---|
| Railway | Running the application and the database | United States (services hosted in the EU-West region) | SCCs | Compliant | |
| Cloudflare | DNS, CDN and security, and object storage (R2) for uploaded documents — stored encrypted | United States (global edge; R2 object storage, not pinned to the EU) | SCCs + DPF | Compliant | |
| Stripe | Payments, subscriptions and billing | United States | SCCs + DPF | Compliant | |
| GetMailer | Sending the service's email | EEA (Norwegian provider) | EEA (no transfer) | Compliant | |
| Twilio | Sending SMS — deadline reminders and the one-time code that verifies your phone number | United States | SCCs + DPF | Compliant | |
| Google (Gemini API) | AI processing and embeddings for the public legal corpus | United States (Gemini Developer API, global) | SCCs + DPF | Compliant | |
| OpenAI | AI processing and document embeddings | United States | SCCs + DPF | Compliant | |
| Anthropic | AI processing and analysis | United States | SCCs | Compliant | |
| Mistral AI | Text extraction (OCR) from scanned documents and images | European Union (France) | EEA (no transfer) | Compliant | |
| Voyage AI | Text embeddings — only if you connect your own key | United States | SCCs | Compliant | |
| Criipto | Identity verification with Nordic eID | European Union (Denmark) | EEA (no transfer) | Compliant | |
| Google (Sign-in) | Signing in with Google (email, name, profile picture) | United States | SCCs + DPF | Compliant | |
| Microsoft (Entra ID) | Signing in with Microsoft (email, name) | United States (Microsoft Online Services, global) | SCCs + DPF | Compliant | |
| Google Analytics | Website statistics — only if you consent to analytics cookies | Ireland and the United States | SCCs + DPF | Compliant | |
| GetCookies | The cookie consent banner and the record of your consent | EEA (Norwegian provider) | EEA (no transfer) | Compliant | |
| Sentry | Error monitoring and diagnostics | United States | SCCs + DPF | Compliant | |
| Qdrant | Vector search for retrieval within documents | European Union | EEA (no transfer) | Compliant | |
| GetPlatform | AI gateway (model request routing and usage metering), product feedback and bug reports | EEA (Norwegian provider) | EEA (no transfer) | Compliant |
Transfer Mechanism Legend:
- SCCs - EU Standard Contractual Clauses (Commission Decision 2021/914)
- DPF - EU-US Data Privacy Framework certified