Subprocessors
Last updated 18 October 2026
Dataceen engages the providers below to process personal data on behalf of its customers, under the Data Processing Agreement. We give at least 30 days’ notice before adding or replacing a subprocessor, by updating this page and emailing each customer’s account owner. The list as of the date above:
| Subprocessor | Purpose | Customer Personal Data involved | Location | Transfer mechanism |
|---|---|---|---|---|
| Microsoft Azure | Hosting of Studio, MCP servers, systems and applications | All | EU (Sweden Central) | n/a within EU |
| MongoDB Atlas (MongoDB, Inc.) | Databases of Dataceen-hosted systems | All system data | EU (AWS Stockholm) | n/a within EU |
| Elastic Cloud (Elasticsearch B.V.) | Search indexes of Dataceen-hosted systems | System data in the search index | EU (Google Cloud, Belgium) | n/a within EU |
| Microsoft (Entra External ID) | Sign-in for the customer’s users and applications | Identities of users of the customer’s systems | EU (Microsoft EU datacenters) | n/a within EU; DPF and SCCs under Microsoft’s DPA for any support access from outside the EU |
| Anthropic (Claude API) | Drafting models from sources, generating example data and applications | Personal data contained in sources and instructions | US | SCCs (modules 2 and 3), UK Addendum and Swiss Addendum in Anthropic’s DPA |
| GitHub | Private repositories holding generated code | Personal data contained in generated code or example data, if any | US | SCCs in GitHub’s Data Protection Agreement |
Providers that process only Dataceen’s own account data (Stripe for payments, Microsoft Exchange Online for email, Google Analytics for website statistics) are listed in the Privacy Policy and are not subprocessors under the DPA.
Changes
- 18 October 2026 — first published.