K9OS SRL ("K9OS") uses the following sub-processors to deliver the K9OS service. We notify customers at least 30 days before adding or replacing a sub-processor.
1. Active sub-processors
| Sub-processor | Service provided | Location | Transfer mechanism |
|---|---|---|---|
| Hetzner Online GmbH | Cloud infrastructure (VPS, encrypted storage box backups) | Falkenstein / Nuremberg, Germany (EU) | Within EU — no transfer mechanism required. Standard Hetzner DPA on file. |
| Plausible Analytics B.V. (planned — pending final selection) | Cookie-free, aggregate analytics for the k9os.ai marketing site | Netherlands (EU) | Within EU. |
| Email service provider — TBD | Transactional emails (account verification, password reset, invoices, support replies) | EU region preferred | To be confirmed when provider is selected. If non-EU, SCCs will be in place. |
2. Activated only when a tenant uses the feature
| Sub-processor | Service | Trigger | Location |
|---|---|---|---|
| Meta Platforms Ireland Ltd (WhatsApp Cloud API) | Underlying messaging platform — each tenant's WhatsApp Business Account (WABA) is provisioned and accessed directly via the Meta WhatsApp Business Platform. K9OS is a registered Meta Tech Provider; we operate the integration ourselves with no third-party BSP in between. | Tenant activates WhatsApp on Standard or Pro plan and completes the in-app embedded signup. | Ireland (EU). Meta SCCs cover any onward routing. |
| Stripe Payments Europe, Ltd. | Payment processing for subscriptions and (v1.5+) BYO Connect for tenant-side billing. | Tenant subscribes to a paid plan or enables billing widget. | Ireland (EU). |
Tech Provider status: K9OS is a registered Meta Tech Provider for WhatsApp Business. We provision each tenant's WABA and route API traffic directly to Meta, with no third-party Business Solution Provider in the chain. Any future change to this routing would be announced as a sub-processor change with the standard 30-day notice.
3. Out of scope — NOT sub-processors
The following are commonly mistaken for sub-processors but are not:
- Self-hosted Ollama + Qwen LLM. All AI processing runs on K9OS-owned hardware. No external AI vendor (OpenAI, Anthropic, Google, etc.) receives customer data. No model is trained on customer data.
- Self-hosted OCR (v1.1+). Photo OCR is processed locally on the same hardware as the LLM. No third-party OCR service.
- Enterprise BYO WhatsApp accounts. Enterprise tenants may opt to bring their own direct Meta Tech Provider relationship instead of using the K9OS-provisioned WABA. In that case the kennel is the customer of its own provider, and K9OS only relays. Meta is not a K9OS sub-processor for that tenant.
- ANAF e-Factura SPV. Romanian state agency, not a private sub-processor.
4. Sub-processor change policy
K9OS will:
- Publish updates to this list with a new "Last updated" date.
- Notify customers via in-app banner and email at least 30 days before adding or replacing a sub-processor.
- Allow customers to object in writing. If a reasonable objection cannot be resolved, the customer may terminate the affected service per the DPA.
5. Contact
Questions about sub-processors: privacy@k9os.ai (active once domain provisioning completes).
This page is maintained at k9os.ai/legal/subprocessors.
// last reviewed: 21 May 2026 · status: v0.1 · romanian translation forthcoming