Subprocessors
Last updated:
Teksta uses the following third-party services to process personal data on its behalf. Teksta is operated by VFA Solutions (org. no. 919 358 599).
Notification policy
Teksta will provide at least 30 days’ advance notice before adding a new subprocessor that materially changes the data flow. Customers may object during that period; an unresolved objection allows the customer to terminate the affected service without penalty. This commitment is reflected in our Data Processing Agreement.
Active subprocessors
Hosting and infrastructure
| Provider | Role | Data categories | Location | Transfer basis |
|---|---|---|---|---|
| Cloudflare, Inc. | Edge web hosting, DNS, and traffic protection | Request metadata, IP addresses | Global edge | EU-US DPF + SCCs |
| Amazon Web Services, Inc. | Object storage and on-demand video rendering | Uploaded audio, transcripts, video renders | Frankfurt, Germany | EU-US DPF + SCCs |
| Cloudflare R2 | Secondary object storage | Transcripts and derived assets | Western Europe (location hint, not a jurisdiction lock) | EU-US DPF + SCCs |
| Hetzner Online GmbH | Hosting for the self-hosted application stack | Account data, content, logs | Nuremberg and Falkenstein, Germany | EEA — no transfer |
Speech, AI, and content processing
| Provider | Role | Data categories | Location | Transfer basis |
|---|---|---|---|---|
| ElevenLabs, Inc. | Speech-to-text | Audio, returned transcripts | US; processing also in EU and SG | EU-US DPF + SCCs |
| Modal Labs, Inc. | GPU inference for transcription and speaker diarisation | Audio, transcripts, diarisation output | EU compute, US-incorporated | EU-US DPF + SCCs |
| OpenAI, L.L.C. | LLM features (chat, summaries, embeddings) | Prompt content | US | EU-US DPF + SCCs |
| Google LLC (Gemini) | LLM features for content generation | Prompt content | US / EU | EU-US DPF + SCCs |
Payments
| Provider | Role | Data categories | Location | Transfer basis |
|---|---|---|---|---|
| Stripe Payments Europe, Ltd. | Card payments and billing | Email, name, billing metadata | Ireland (EU); processing also in US | EU-US DPF + SCCs |
| Vipps MobilePay AS | Norwegian mobile payments | Phone number, name, payment metadata | Norway / EEA | EEA — no transfer |
Communications
| Provider | Role | Data categories | Location | Transfer basis |
|---|---|---|---|---|
| Twilio Inc. (SendGrid) | Outbound transactional email | Email address, message content | US | EU-US DPF + SCCs |
| Google LLC (Gmail) | Inbound and outbound support mail | Email addresses, message content | US | EU-US DPF + SCCs |
Analytics
| Provider | Role | Data categories | Location | Transfer basis |
|---|---|---|---|---|
| PostHog Inc. | Product analytics (EU cloud) | Events, identifiers, IPs | Frankfurt, Germany | EEA — no transfer |
| Microsoft Corporation (Clarity) | Session replay (loaded only after consent) | Page interactions, IP, device info | US | EU-US DPF + SCCs |
| Google LLC (Tag Manager, Ads) | Marketing tag delivery and conversion measurement (loaded only after consent) | Page events, IPs, ad-attribution identifiers | US | EU-US DPF + SCCs |