Data Sub-processors

As part of the delivery of our services, Kaivo Oy uses third-party data processors (“sub-processors”) that may have access to personal data contained within customer data. This page lists the sub-processors currently authorized to process such data on our behalf.

For information on how we handle personal data in general, see our Privacy Policy.

Sub-processors

Infrastructure and hosting

  • Google Cloud Platform (Google Ireland Limited) — Ireland
    • Servers, storage, databases and cloud services that host the Kaivo platform
    • Processing location: EU

Billing and payments

  • Stripe (Stripe Payments Europe, Limited) — Ireland

    • Payment processing and subscription management
    • Processing location: EU
  • Procountor (Accountor Finago Oy) — Finland

    • Invoicing and billing
    • Processing location: EU

Communication

  • Loops (Astrodon Corporation) — United States
    • Transactional and marketing email delivery
    • Processing location: United States
    • Safeguards: Standard Contractual Clauses (SCCs), EU–US Data Privacy Framework (DPF)

Customer support

  • Featurebase (CORDNET OÜ) — Estonia
    • Customer support and feedback management
    • Processing location: EU (Germany)

Analytics and monitoring

  • PostHog (PostHog, Inc.) — United States

    • Product analytics and usage tracking within the Kaivo platform
    • Processing location: EU (Germany)
    • Safeguards: Standard Contractual Clauses (SCCs), EU–US Data Privacy Framework (DPF)
  • Sentry (Functional Software, Inc.) — United States

    • Application error tracking and performance monitoring
    • Processing location: EU (Germany)
    • Safeguards: Standard Contractual Clauses (SCCs), EU–US Data Privacy Framework (DPF)

Business operations

  • Google Workspace (Google Ireland Limited) — Ireland

    • Document storage including contracts
    • Processing location: EU
  • Zero (Zero Technologies Oy) — Finland

    • Customer relationship management
    • Processing location: EU

Notification of changes

As described in section 12.9 of our Terms of Service, we will notify customers at least 30 days before a new sub-processor begins processing personal data. Customers may object to the engagement of a new sub-processor during this period.

Updated: April 21, 2026