Sub-processors
This is a translation. Only the Dutch text is binding.
These are the sub-processors Servaro uses to provide the service. The list is Annex 3 to the Data Processing Agreement.
| Sub-processor | Country | Purpose | Safeguards |
|---|---|---|---|
| Hosting provider in the Netherlands | Netherlands | Hosting of our own servers that Servaro runs on, including the database, files and backups | Data processing agreement; processing in the Netherlands |
| Sendinblue SAS (Brevo) | France (EU) | Sending transactional email, such as notifications and invitations | Data processing agreement; processing in the EU |
| VoIPfabric | Netherlands | Sending text messages | Data processing agreement; processing in the Netherlands |
| bedrijfsdata.nl | Netherlands | Looking up company details when entering a customer | Data processing agreement; processing in the Netherlands. Only search terms such as the company name or Chamber of Commerce number are sent |
| Mistral AI (Voxtral) | France (EU) | Converting speech to text for suggestions | Data processing agreement; processing in the EU; no training on customer data |
| Anthropic (Claude) via AWS Bedrock, Frankfurt region | Germany (EU); parent company in the US | Text suggestions, such as work report texts and summaries | Data processing agreement with AWS; processing only in the EU; no training on customer data; EU Standard Contractual Clauses and the EU-US Data Privacy Framework as a fallback |
The AI suppliers Mistral and Anthropic (via AWS Bedrock) only receive data when the AI features are switched on.
Not a sub-processor of Servaro, for information
| Service | Why not |
|---|---|
| Microsoft (Entra ID) | Only if the customer chooses to log in via Microsoft. For that, the customer has its own agreement with Microsoft. |
| Mollie B.V. (Netherlands) | Processes the customer's payments to Servaro. For this, Servaro itself is the controller; Mollie does not process customer data. |
Changes
If Servaro wants to add or replace a sub-processor, we notify the customer's contact person by email at least 30 days in advance, as set out in article 6 of the Data Processing Agreement. The new list then also appears on this page.
Please send questions about sub-processors to privacy@servaro.nl.