On this page
How this list works
DataFigured Oy processes the personal data that customers submit to ERP Agent on their behalf, as a processor. The companies below are our sub-processors. Each one is bound by a written contract to data protection obligations at least as protective as our Data Processing Agreement. AI providers may not train on customer data, and any processing outside the EU/EEA relies on a valid transfer mechanism under Chapter V of the GDPR.
We update this page before a new sub-processor starts processing customer personal data. Under Section 6 of our Data Processing Agreement, the update is our notice of the change. Customers on the Enterprise package are also told by email at least 30 days in advance.
A customer may object to a new sub-processor on reasonable data protection grounds within 30 days of the update, by email to privacy@erp-agent.com.
Sub-processors in use
| Sub-processor | Location of processing | Purpose | Transfer mechanism |
|---|---|---|---|
| Amazon Web Services EMEA SARL (Luxembourg) | EU – Frankfurt (eu-central-1) | Hosting, storage, compute, logs, sending of email | Not needed (EU) |
| Vercel Inc. (USA) | EU – Frankfurt (fra1) | Hosting of the web application | SCCs for any access from outside the EEA |
| OpenRouter, Inc. (USA) | Outside the EEA possible; EU only in the Enterprise package | Routing of language-model and embedding requests to the models available through OpenRouter, such as Google, OpenAI, Anthropic and DeepSeek models; zero-data-retention endpoints | SCCs |
| Microsoft Ireland Operations Ltd – Microsoft Azure (Functions) | EU – Sweden Central | Connection to a customer’s ERP database where the ERP has no API | Not needed (EU) |
| Mistral AI SAS (France) | EU | Text recognition (OCR) of PDF attachments | Not needed (EU) |
| Microsoft Ireland Operations Ltd | EU/EEA | Agent mailboxes (receiving and sending email) | Not needed (EU/EEA) |
Authorised EU AI providers
These providers are authorised for language-model processing in EU/EEA regions only, on the same terms: no training on customer data, and zero data retention where the provider offers it. We may route requests to them, for example to use a model that works better, without further notice.
| AI provider | Region | Purpose |
|---|---|---|
| Amazon Web Services EMEA SARL – Amazon Bedrock | EU regions | Language models |
| Google Cloud EMEA Ltd – Vertex AI | EU regions | Language models and embeddings |
| Microsoft Ireland Operations Ltd – Azure AI Foundry | EU Data Zone | Language models |
| Mistral AI SAS | EU | Language models |
| Nebius (Token Factory) | EU – Finland or France | Open-weight language models |
| Together Computer, Inc. | EU data centre | Open-weight language models |
| Fireworks AI, Inc. | Europe region | Open-weight language models |
Changes
| Date | Change |
|---|---|
| List published. |
Contact
Questions about this list or our data processing: privacy@erp-agent.com. DataFigured Oy, business ID 3519376-2, Mechelininkatu 4 B 51, 00100 Helsinki, Finland. See also our privacy policy and terms of service.