Subprocessors

1. Purpose of this page

This page lists the third-party subprocessors that edON.ai ("we", "us") engages to help provide the Platform and Services described in our Terms of Service and Privacy Policy. A "subprocessor" is a third-party service provider that processes Client Content and/or personal data on our behalf, under our instructions, andsolely for the purpose of delivering the Services.

All subprocessors listed beloware bound by written data processing agreements (or equivalent terms) thatrequire them to protect personal data in a manner consistent with applicableData Protection Laws, including the GDPR.

This page is referenced by, andforms part of, our Privacy Policy, Section 6 ("How We Share Your Personal Data").

2. Current Subprocessors

Subprocessor	Purpose	Data processed	Location
Google Cloud Run (Google)	Hosting and execution of Platform compute processes (video/audio processing pipelines)	Client Content (video, audio, transcripts), technical/usage data	EU — europe-west1 (Belgium, St. Ghislain), europe-north1 (Finland, Hamina), and/or europe-north2 (Sweden, Stockholm)
Hetzner Online GmbH	Storage of Client Content (uploaded and generated video files)	Client Content (video files)	Finland (EU)
Google (OAuth)	User authentication via Google Sign-In	Name, email address, profile picture, unique provider ID	For EU/European users, requests are dynamically routed to the closest regional endpoint / Google Global Cache edge nodes in Europe, with the nearest core Google data centers located in Hamina, Finland and Warsaw, Poland
Google Drive (Google)	Optional integration: import/export of video and slide files at the Client's request	File content, folder metadata, OAuth refresh token	EU (Google's "eu" multi-region infrastructure, replicating data across multiple data centers within the European Union, including europe-west4 (Netherlands, Eemshaven) and europe-north1 (Finland, Hamina))
Microsoft OneDrive (Microsoft)	Optional integration: import/export of video and slide files at the Client's request	File content, folder metadata, OAuth refresh token	EU (primarily Netherlands and Ireland)
Microsoft Entra ID (Azure AD)	Single Sign-On (SSO) authentication for organizations that choose this login method	Name, email address, organization identity data	EU (Microsoft's EMEA data centers, primarily Amsterdam, Netherlands and Dublin, Ireland)
DeepL SE	Machine translation of subtitles, transcripts, and slide text	Text content submitted for translation	Sweden (EU)
ElevenLabs Inc.	AI voice generation (text-to-speech) for dubbed audio output, and audio transcription (via Scribe v1) to generate transcripts from uploaded audio/video	Text/script content, generated audio; uploaded audio/video content, generated transcripts	EU (Netherlands, for EU/European traffic); backup and primary data storage in the United States
Google (Gemini API / Gemini TTS)	AI-assisted translation, content generation, and text-to-speech voice generation	Text content, generated audio	Global (Google infrastructure) — requests are dynamically routed to whichever of Google's global data center regions has available capacity / lowest load at the time of the request; no fixed single location
OpenAI, L.L.C.	AI-assisted translation, transcript processing, and content generation (via API and/or ChatGPT)	Text content submitted for processing	Processed via Microsoft Azure cloud infrastructure; for EU/European users, servers are located across the EU and the United States
Gamma	AI-generated slide content: converts Client-uploaded PDF files into slide decks as part of the PDF-to-video content pipeline	Uploaded PDF content, generated slide/presentation content	United States (San Francisco, CA), hosted on AWS; for European users, core application and database requests typically route through the AWS European hub in Frankfurt, Germany
Replicate, Inc.	Hosting and execution of third-party AI models used for video/audio processing tasks (e.g. voice, translation, or media-processing models). Replicate may route processing requests to various underlying third-party model providers hosted on its platform.	Client Content (video, audio, text) submitted for model inference	For EU/European users, requests are dynamically routed through the closest available Western and Central European cloud regions; company headquartered in the United States

3. International Data Transfers

Some subprocessors listed aboveare located outside the European Economic Area (EEA), primarily in the UnitedStates. Where this is the case, we ensure that such transfers are protectedthrough appropriate safeguards, including the Standard Contractual Clauses(SCCs) adopted by the European Commission, or another valid transfer mechanismrecognized under the GDPR. For more information, see Section 7 of our Privacy Policy.

4. Changes to This List

We may add, remove, or replacesubprocessors from time to time as our Services evolve. We will keep this pageup to date and will notify Clients of any new subprocessor that will processpersonal data at least fifteen (15) calendar days in advance of the change, byemail or notice within the Platform, giving Clients the opportunity to objecton reasonable grounds relating to data protection.

Changes to subprocessors usedsolely for infrastructure or hosting purposes that do not involve access topersonal data (e.g. underlying model providers routed through Replicate, asdescribed in Section 2) may be made without prior notice, as they do notconstitute a change to the subprocessors of record.

5. Contact Us

If you have any questions about this page or our use of subprocessors, please contact us at hello@edon.ai