Sub-processors
Not final: the provider's details below are incomplete (company legal name, tax ID (CIF/NIF), registered address, legal contact email, privacy contact email).
The providers below process personal data on our behalf to deliver the Service. Workspace owners are emailed at least 30 days before we add or replace one (see the Data Processing Agreement, section 3.4).
| Provider | Purpose | Data | Location | Transfer safeguard |
|---|---|---|---|---|
| Amazon Web Services EMEA SARL | Hosting: application servers, database, backups, logs, secrets | All account data and Customer Content | EU: Ireland (eu-west-1) | Stays in the EU; AWS Data Processing Addendum with Standard Contractual Clauses for any support access |
| Anthropic, PBC | AI models (Claude) that generate answers, lessons and suggested edits | The process documents and the ticket, issue or message content relevant to each request; no account or billing data | United States | EU–US Data Privacy Framework where certified, otherwise Standard Contractual Clauses, under Anthropic's commercial terms; no training on customer data |
| Stripe Payments Europe, Ltd. and Stripe, Inc. | Subscriptions, invoices, tax calculation, card processing | Billing contact, address, VAT number, payment details (held by Stripe only) | Ireland; United States | EU–US Data Privacy Framework where certified; Standard Contractual Clauses |
| Resend, Inc. | Transactional email (invitations, password resets, notices) | Recipient email address and the content of the email | United States | Standard Contractual Clauses |
| Slack Technologies (only if the Customer installs the Slack app) | Delivering answers inside the Customer's Slack workspace | Messages exchanged with the app | According to the Customer's Slack data residency | The Customer's own agreement with Slack |
Not sub-processors
- Connected tools (such as Freshdesk, Jira, Confluence, Google Docs): Ovenbird reads them under the Customer's own accounts and agreements with those providers, and writes only what the Customer's users ask it to (notes, comments).
- Google and Microsoft sign-in: when a person chooses to sign in with them, they act under their own terms as independent controllers.
Change log
- 2026-10-12 · Hosting region confirmed (Ireland, eu-west-1); sign-in providers clarified.
- 2026-10-08 · First list.