Subprocessors
Last updated 30 October 2026. These are the companies that process customer data on behalf of Ahel Technologies OÜ, what each one does for Ahel, what reaches it, and where it runs. The list is part of our data processing addendum.
Always on
These services operate Ahel, authentication and transactional email.
WorkOS, Inc.
Authentication through AuthKit, sign-in sessions and workspace identity.
- Data
- Account email, profile identifiers, authentication events and session metadata.
- Region
- United States; see WorkOS data-processing terms for its subprocessors
Contabo GmbH
Hosting: the application servers, the database, encrypted credentials, and backups.
- Data
- All workspace data at rest.
- Region
- European Union (EU)
Cloudflare, Inc.
Edge network: DNS, TLS, request delivery, caching and traffic protection.
- Data
- Request metadata (IP addresses and headers) and content passing through the edge network.
- Region
- Global edge network; a US company operating under EU data-processing terms
Twilio SendGrid
Transactional email: sign-in links, invites, receipts, and workspace notices.
- Data
- Email address and the contents of the notice.
- Region
- United States
Only when you choose them
These are reached only when a workspace turns the feature on: a card or crypto payment, a managed data or AI task, or a connected Google service.
Stripe Payments Europe, Ltd.
Card payments, billing records and payment status notifications.
- Data
- Billing name, email address, tax id, and payment details (card numbers never reach Ahel).
- Region
- Ireland (EU), with Stripe, Inc. in the United States
NOWPayments
Cryptocurrency top-ups of the prepaid balance and payment status notifications.
- Data
- Order reference, amount, payment currency, transaction and wallet information required for settlement; blockchain transactions are public.
- Region
- Estonia (EU)
OpenRouter, Inc.
AI model routing for requested catalog tasks, using Ahel-managed credentials or an available workspace key.
- Data
- Prompts, submitted content and results needed for the chosen model request.
- Region
- United States; the model behind a request runs where that provider runs
Managed data and model providers
Search, scraping, enrichment, email verification, company data and AI inference providers execute the catalog tasks you request on Ahel-managed accounts.
- Data
- Task inputs such as search queries, URLs, contact or company identifiers, prompts and files, plus returned results and usage metadata.
- Region
- Per provider; may include the EU, United States and other countries stated in provider terms
Google Ireland Limited
Optional connected Google services, only when you connect your Google account and request an available task.
- Data
- Account identifiers, authorised OAuth tokens and the Google Analytics, Google Search Console, Google Tag Manager data required by the requested task.
- Region
- Ireland (EU), with Google LLC in the United States
The catalog provider list identifies each task’s available providers and links their documentation. A request is sent only to the provider or fallback providers used for that run, not to every listed provider. Providers reached with your own key or connected account also process data under your agreement with them. Review their regions, retention and model-training terms before sending personal data.
Changes to this list
Before a new subprocessor handles customer data we update this page and email workspace owners who hold a signed data processing addendum, at least 30 days ahead. If you object, write to privacy@ahel.ai within that window and we will work out an alternative or let you end the affected service without penalty.
How we handle personal data is in the privacy policy; the processor terms are in the data processing addendum.