Sub-processors
DPA Annex A · Last updated: 30.3.2026
This page lists all third parties that process data via the Arctura Service. Sovereignty Switch: In EU mode, AI processing uses only EU-based models (Mistral, Aleph Alpha). See the Data Processing Agreement (DPA).
Current list
| Sub-processor | Location | Purpose | Data type |
|---|---|---|---|
| Microsoft Azure | 🇸🇪 Sweden Central (EU) | Cloud infrastructure (compute, container registry) | Telemetry, analytics, request logs |
| Supabase | 🇮🇪 Ireland (EU-West-1) | Managed database, authentication, realtime | Users, fleet data |
| Stripe | 🇮🇪 Ireland (Stripe Payments Europe) | Payment processing, subscription management | Billing email, customer ID |
| Resend | 🇺🇸 United States (DPF + SCC) | Transactional email | Name, email, message |
| HubSpot | ⚠️ Portal-specific hosting location — verify in the active portal | CRM handling for Sovereign Scan leads | Email, company name, scan summary |
| Firecrawl | 🇺🇸 United States | Public-domain content analysis for Sovereign Scan | Public domain and page content |
| DuckDuckGo | ⚠️ Public API vendor location | Public-domain search enrichment fallback | Public domain query |
| Google AI (Gemini) | 🇺🇸 / 🇪🇺 | LLM: fleet analytics, alert reports (Global mode) | Limited telemetry (device, location, speed) |
| Anthropic (Claude) | 🇺🇸 | LLM: fleet analytics, Päätösyksikkö (Global mode) | Limited telemetry |
| x.ai (Grok) | 🇺🇸 | LLM: fleet analytics (Global mode) | Limited telemetry |
| OpenRouter (Mistral, DeepSeek, Perplexity et al.) | 🇪🇺 / 🇺🇸 | LLM: multi-model gateway (task-based routing) | Limited telemetry |
| Aleph Alpha | 🇩🇪 Germany | LLM: Päätösyksikkö EU mode — data stays in Europe | Limited telemetry |
Change log
| Date | Change |
|---|---|
| 30.3.2026 | Added Sovereign Scan sub-processors: HubSpot, Firecrawl and DuckDuckGo. Verified hosting from vendor docs. |
| 16.2.2026 | Initial list: Azure, Supabase, Stripe, Resend, AI models (Gemini, Claude, Grok, Mistral, Aleph Alpha). |
Change notice
New sub-processors will be notified at least 30 days before onboarding (by email and/or via the Service). The Customer has the right to object on reasonable grounds within 14 days.
NeurFlow Oy · Business ID: 3597951-1 · Helsinki, Finland
Inquiries: legal@neurflow.fi