Sub-processors

Third-party service providers that process data on our behalf

Last Updated: January 1, 2026
GDPR Article 28 Compliant

30-Day Advance Notice

Per our Terms of Service (Section 21.7), we provide at least 30 days' advance notice before adding new sub-processors. Subscribe below to receive notifications of changes.

Subscribe to Sub-processor Updates

Receive email notifications when we add or change sub-processors. You'll have 30 days to review and object to any changes.

Current Sub-processors

These are the third-party service providers we use to deliver the Argumentree service.

Microsoft Azure

EU

Cloud Infrastructure & Database Hosting

Location: Germany (Frankfurt - West Europe)
Safeguard: EU Data Residency
Data Types:
All Customer DataAccount InformationSession DataBackups
Certifications:
  • ISO 27001
  • ISO 27017
  • ISO 27018
  • SOC 2 Type II
WebsiteView DPA

Brevo (Sendinblue)

EU

Transactional Email Delivery

Location: France (Paris)
Safeguard: EU Data Residency
Data Types:
Email AddressesEmail ContentDelivery Metadata
Certifications:
  • ISO 27001
  • GDPR Compliant
WebsiteView DPA

Stripe

EU-US DPF

Payment Processing

Location: United States (with EU entities)
Safeguard: EU-US Data Privacy Framework
Data Types:
Billing InformationPayment Card Data (PCI DSS)Transaction Records
Certifications:
  • PCI DSS Level 1
  • SOC 2 Type II
  • EU-US DPF Certified
WebsiteView DPA

Microsoft Azure AI & Speech

EU

AI Translation, Extraction, Analysis & Text-to-Speech

Location: Sweden (Sweden Central - EU)
Safeguard: Same Azure DPA as hosting
Data Types:
Text Content for AI ProcessingDiscussion and Argument Text
Default and only AI provider in production. All AI processing stays within the EU. Real-time processing only - no data retention.
Certifications:
  • ISO 27001
  • SOC 2 Type II
WebsiteView DPA

Data Flow Summary

Sub-processorProductsData LocationTransfer MechanismData Stored?
Microsoft AzureAllGermany (EU)N/A (EU)Yes - Primary storage
BrevoAllFrance (EU)N/A (EU)Yes - Email logs
StripeAllUSA (DPF)EU-US Data Privacy FrameworkYes - Payment data only
Azure AI & SpeechAllSweden (EU)Same Azure DPANo - Real-time only
EU Data Residency
EU-US Data Privacy Framework

Change Log

History of changes to our sub-processor list. Per our Terms of Service, we provide 30 days' advance notice before adding new sub-processors.

January 1, 2026
InitialInitial sub-processor list published

Your Objection Rights

Under our Data Processing Agreement (DPA), you have the right to object to new sub-processors:

  1. Notification: You will receive 30 days' advance notice of any new sub-processor.
  2. Objection Window: You have 14 days from receiving notice to submit a written objection based on reasonable data protection grounds.
  3. Resolution: We will work with you to address your concerns. If we cannot reach a resolution, you may terminate the affected service within 30 days.

To object to a sub-processor, contact: legal@argumentree.com

Related Documents

Data Processing Agreement
GDPR Article 28
Privacy Policy
How we handle data
Terms of Service
Section 21