K9OS TECH SRL ("K9OS") uses the following sub-processors to deliver the K9OS service. We notify customers at least 30 days before adding or replacing a sub-processor.
1. Sub-processors
Application & your data — EU only. The K9OS application, its database, and all tenant operational data are hosted exclusively in the EU. The AI runs locally on K9OS-owned hardware. No external party has access to the database or the AI.
| Sub-processor | Service provided | Location | Transfer mechanism |
|---|---|---|---|
| Hetzner Online GmbH | Application hosting + database + encrypted backups (all tenant operational data) | Falkenstein / Nuremberg, Germany (EU) | Within EU — no transfer mechanism required. Hetzner DPA on file. |
Marketing website & company email only. These serve the public website (k9os.ai) and our mailboxes. They have no access to the application, the database, or the AI, and never receive tenant or dog-owner operational data.
| Sub-processor | Service provided | Location | Transfer mechanism |
|---|---|---|---|
| Cloudflare, Inc. | Marketing-site hosting/CDN (Cloudflare Pages) + the serverless contact-form handler | USA (global edge, incl. EU) | EU–US Data Privacy Framework + Standard Contractual Clauses. |
| Resend, Inc. | Contact-form email delivery (forwards form submissions to our mailbox) | USA | Standard Contractual Clauses (Resend DPA). |
| Migadu (Migadu Email Hosting) | Company mailboxes (contact@, privacy@, legal@) | Switzerland | EU adequacy decision (Switzerland) — no SCCs required. |
| Plausible Analytics B.V. | Cookie-free, aggregate website analytics | Netherlands (EU) | Within EU. |
2. Activated only when a tenant uses the feature
| Sub-processor | Service | Trigger | Location |
|---|---|---|---|
| Meta Platforms Ireland Ltd (WhatsApp Cloud API) | Underlying messaging platform — each tenant's WhatsApp Business Account (WABA) is provisioned and accessed directly via the Meta WhatsApp Business Platform. K9OS is a registered Meta Tech Provider; we operate the integration ourselves with no third-party BSP in between. | Tenant activates WhatsApp on Standard or Pro plan and completes the in-app embedded signup. | Ireland (EU). Meta SCCs cover any onward routing. |
| Stripe Payments Europe, Ltd. | Payment processing for subscriptions and (v1.5+) BYO Connect for tenant-side billing. | Tenant subscribes to a paid plan or enables billing widget. | Ireland (EU). |
3. Out of scope — NOT sub-processors
The following are commonly mistaken for sub-processors but are not:
- Self-hosted Ollama + Qwen LLM. All AI processing runs on K9OS-owned hardware. No external AI vendor (OpenAI, Anthropic, Google, etc.) receives customer data. No model is trained on customer data.
- Self-hosted OCR (v1.1+). Photo OCR is processed locally on the same hardware as the LLM. No third-party OCR service.
- Enterprise BYO WhatsApp accounts. Enterprise tenants may opt to bring their own direct Meta Tech Provider relationship instead of using the K9OS-provisioned WABA. In that case the kennel is the customer of its own provider, and K9OS only relays. Meta is not a K9OS sub-processor for that tenant.
- ANAF e-Factura SPV. Romanian state agency, not a private sub-processor.
4. Sub-processor change policy
K9OS will:
- Publish updates to this list with a new "Last updated" date.
- Notify customers via in-app banner and email at least 30 days before adding or replacing a sub-processor.
- Allow customers to object in writing. If a reasonable objection cannot be resolved, the customer may terminate the affected service per the DPA.
5. Contact
Questions about sub-processors: privacy@k9os.ai (active once domain provisioning completes).
This page is maintained at k9os.ai/legal/subprocessors.