Start free trialLogin
FeaturesPricingContact
Start free trialLogin

Sub-processor List

Last updated: November 5, 2025

Scope

This page lists third-party processors engaged by Bayescase GmbH ("Bayescase", "we") to process Customer Personal Data on behalf of Customers in connection with the Bayescase SaaS Service (as defined in our DPA). Vendors we use as independent controllers for our own account, billing, or marketing purposes are listed separately for transparency.

Change Notifications and Objections

  • We will provide at least 30 days' advance notice of intended changes to the Sub-processor list by updating this page and, where feasible, by email or in-app notice.
  • To receive email updates, send a request to privacy@bayescase.com with the subject "Subscribe: Sub-processor updates" from your admin email.
  • Customers may object to a change on reasonable data protection grounds within 30 days of notice, per our DPA. If we cannot resolve an objection in good faith, the Customer may terminate the affected Service and receive a pro rata refund for the prepaid, unused portion.

Current Sub-processors (Service Data)

1. Amazon Web Services EMEA SARL (and affiliated AWS entities)

  • Role/purpose: Cloud hosting, compute, storage, databases, networking, encryption key management, logging/monitoring for the Bayescase production environment.
  • Data processed: All categories of Customer Personal Data stored or processed in the Service (including backups).
  • Processing location: EU/EEA (AWS Frankfurt, eu-central-1). Backups retained in the EU.
  • Transfer mechanism (if applicable): Not applicable for EU-region hosting. AWS provides a GDPR DPA and Standard Contractual Clauses (SCCs) for any support access from outside the EEA if it occurs.

2. OpenAI, L.L.C. (during beta phase)

  • Role/purpose: AI inference and content generation used by Bayescase features (processing of prompts/inputs and generation of outputs).
  • Data processed: Customer prompts/inputs, generated outputs, and related technical metadata necessary for API requests.
  • Processing location: United States (temporary, and until EU-region migration).
  • Transfer mechanism: EU Standard Contractual Clauses (SCCs). OpenAI'"'"'s API data usage policy applies (see: https://openai.com/policies/api-data-usage-policies).
  • Retention by sub-processor: As per OpenAI policy (currently up to 30 days for abuse monitoring; subject to change by OpenAI).
  • Note: When EU-region Azure OpenAI becomes available for Bayescase, we will migrate AI processing to the EU/EEA and update this page with the effective date.

Planned Sub-processor (EU-only AI Processing)

Microsoft Azure OpenAI Service (Microsoft Ireland Operations Limited)

  • Role/purpose: AI inference and content generation for Bayescase features (replacement for OpenAI US once approved).
  • Processing location: EU region (planned: Sweden Central and/or West/North Europe).
  • Data processed: Customer prompts/inputs, generated outputs, and related technical metadata necessary for API requests.
  • Transfer mechanism: Not applicable for EU-only processing. Microsoft GDPR terms apply.
  • Status: Planned. We will post the effective date at least 30 days before activation.

General Notes

  • Primary data residency: Customer Data is hosted in the EU/EEA (AWS eu-central-1, Frankfurt). AI inference is temporarily performed in the United States by OpenAI during beta; SCCs and supplementary measures apply (see DPA).
  • Backups: Encrypted backups are stored in the EU with a typical retention of up to 35 days.
  • Contact: For questions or objections, contact privacy@bayescase.com.