Sub-processors
Last updated: September 24, 2026
Benzos uses the sub-processors listed below to operate the Service. Where personal data is transferred outside the EEA, an appropriate Chapter V GDPR transfer mechanism applies, as indicated. Business customers will be informed before a new sub-processor is engaged and may object as provided in the Data Processing Agreement.
| Sub-processor | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Hosting / VPS provider | Application hosting, server infrastructure | EU | No third-country transfer |
| PostgreSQL (self-hosted, Docker) | Primary database for accounts, bots, conversations | EU (same host) | No third-country transfer |
| DeepSeek (api.deepseek.com) | AI model inference for chatbot replies (when selected) | China | SCCs (Decision (EU) 2021/914/EC) + Transfer Impact Assessment + supplementary measures |
| OpenAI | AI model inference for chatbot replies (when selected) | USA | EU-US Data Privacy Framework and/or SCCs + TIA |
| Anthropic | AI model inference for chatbot replies (when selected) | USA | SCCs + TIA |
| Google (Gemini) | AI model inference for chatbot replies (when selected) | USA / EU regions | SCCs + TIA |
| Meta Platforms (Facebook Messenger) | Messaging channel — receiving and delivering customer messages | USA / EU | Meta Platform Terms + SCCs; EU-US Data Privacy Framework |
| Email delivery provider | Transactional email (verification, password reset, notices) | EU / USA | SCCs + TIA where applicable |
| Payment provider | Billing and payment processing for business customers | EU | No third-country transfer (or SCCs where applicable) |
Questions or objections: support@benzos.uk