Sub-processors
Last updated: September 30, 2026
To deliver the Odaq platform, Digital Peax OÜ engages the third-party sub-processors listed below. We require processing on our documented instructions and data processing agreements with confidentiality and security obligations consistent with Art. 28 GDPR. Agreement and transfer-safeguard verification is still pending for the hosted-browser provider, as identified below. This page complements our Privacy Policy.
1. Current Sub-processors
| Sub-processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Vercel, Inc. | Application hosting, serverless compute, and CDN | United States | EU–US DPF (certified) + SCCs |
| Vercel Blob (Vercel, Inc.) | Storage of uploaded files and assets | United States | EU–US DPF (certified) + SCCs |
| Neon, Inc. | Managed PostgreSQL database (primary data store) | United States | EU–US DPF (certified) + SCCs |
| Anthropic, PBC | AI model provider (agent processing of inputs) | United States | SCCs (Module 2) |
| OpenAI, L.L.C. | AI model provider (agent processing of inputs), and the picture model for article pictures and Studio ads (GPT Image), which may keep the prompts and pictures it receives under its own terms | United States | SCCs (Module 2) |
| Google LLC | AI model provider (Gemini; configurable routing), consent-based website/app analytics (Google Analytics 4 via Google Tag Manager), and web fonts for the brand font previews in the app (Google Fonts, requested by your browser, which shares its IP address with Google) | United States | EU–US DPF (certified) + SCCs |
| Resend | Transactional & authentication email delivery | United States | SCCs (Module 2) |
| Cloudflare, Inc. | Bot protection / CAPTCHA (Turnstile) | United States | EU–US DPF (certified) + SCCs |
| DataForSEO LLC | SEO data (rankings, SERP, keywords, backlinks) and retrieval of pages from your own website when direct access is blocked, including page text that may contain personal data | United States | SCCs (Module 2) |
| Browserless (browserless.io, Inc.) | Hosted browsers for page rendering and screenshots, including retries of blocked pages on your own website; URLs, page content and screenshots may contain personal data | United States; browser execution defaults to Amsterdam, Netherlands. Stored service data may leave the EU. | Data processing agreement and international-transfer safeguards pending confirmation |
Transfer mechanisms. The table identifies providers relying on certification under the EU–US Data Privacy Framework (adequacy decision of July 2023) or Standard Contractual Clauses (Module 2, controller-to-processor), supported by transfer impact assessments where appropriate. For Browserless, we have not yet confirmed the applicable agreement or transfer safeguards. An EU browser execution region does not establish that all processing stays in the EU. See Section 5 of our Privacy Policy for details.
2. Connected Platforms (Data Sources)
When you connect your own marketing account — Google Analytics 4, Google Ads, Google Search Console, Google Tag Manager, Meta Ads, or Ahrefs — you authorise Odaq to read data from that account. Those customer-connected accounts are data sources you control, governed by your own agreement with each provider. You can disconnect any of them at any time from your project settings to revoke access. This is separate from Google Analytics used by Odaq to measure our own website and app after your consent, which is included in the Google LLC entry above and described in our Cookie Policy.
3. Changes & Notice
We keep this list current. Before we add a new sub-processor or materially change an existing engagement, we commit to giving at least 30 days' advance notice to registered users (by email or in-app notice), so you have the opportunity to object before the new sub-processor begins processing your data. If you object and we cannot reasonably accommodate the objection, you may terminate your use of the affected service.
4. Questions
To request our sub-processor agreements or raise an objection, contact:
info@odaq.aiDigital Peax OÜ · Sepapaja tn 6, 15551 Tallinn · Estonia