Subprocessors and hosting

This page lists the companies that process personal data for Dienox when we run the platform for you, in the Dienox cloud, and says where your data is kept. Our data processing agreement and our privacy policy list the same companies, from the same source.

The list

Each works under its own data processing terms, which bind it to our instructions and to appropriate security, and only as far as its task requires. We remain responsible for them.

Where the platform runs

• The platform runs in Microsoft Azure in Frankfurt, Germany (the region Germany West Central). Its server, its database, every knowledge base, uploaded files, recorded interviews, logs and secrets are all kept there.
• The server has no ports open to the internet. Requests reach it only through an encrypted tunnel from Cloudflare.
• Its disks are encrypted at rest, and every connection to the site is encrypted in transit.
• The whole server is backed up every four hours. Backups are kept for 30 days in a vault that holds a second copy in Microsoft’s paired region, Germany North, also in Germany.
• Server logs are kept for at most 30 days.
• Interviews you record are turned into text by Azure AI Speech, in the same region.

What leaves the EU

• When the platform’s own AI features run, such as an import, an agent or a summary, the text they work on is sent to Anthropic in the United States and the answer comes back. Anthropic may not use it to train its models.
• Cloudflare carries every request to the site through its global network, at the location nearest the visitor.
• Resend sends the platform’s emails from Ireland, and Google Workspace holds our own email. Both are companies in the United States.

Where personal data leaves the European Economic Area, we rely on the EU-US Data Privacy Framework where the recipient is certified under it, and otherwise on the European Commission’s Standard Contractual Clauses, with additional safeguards where needed.

What is not on this list

• Your own AI tools, such as Claude, ChatGPT or Copilot. You or your organisation chose them and connect them. What they read from your knowledge base is sent to them at your request, under their provider’s own terms.
• The systems you connect, such as Google Drive, Gmail, SharePoint, Slack, Notion, Moneybird, Klaviyo or WhatsApp. Dienox reads from them and writes to them on your instruction, and their provider works for you under your own agreement with it.
• The Enterprise edition, which runs the platform in your own environment. Which companies process data there follows from your own setup and is set out in your agreement with us.

Changes

We tell the administrators of every organisation by email at least 30 days before a new or replaced subprocessor starts, as our data processing agreement says, and list each change here.

Contact

Questions about who processes your data, or an objection to a new subprocessor:

Dienox B.V.
Europalaan 400
3526 KS Utrecht
The Netherlands
Email: privacy@dienox.com