SUB-PROCESSORS
Version 1.1 • Last updated: 17 July 2026
DIKAI LTD — dikigoros.ai Service
What this page is
This page lists the third-party service providers (sub-processors) we use to deliver the dikigoros.ai Service. Each of them processes limited personal data on our behalf under a written Article 28 GDPR data processing agreement. We publish this list so our users, customers and regulators can see at any time who has access to what.
For the wider context (categories of data we process, retention, your rights and our security commitments), please see our Privacy Policy at https://www.dikigoros.ai/privacy.
Current sub-processors
| Provider | Role / data processed | Country | Transfer basis |
|---|---|---|---|
| Vercel Inc. | Application hosting, serverless functions and edge delivery. Processes account data, Input Data and AI outputs to operate the Service. Production region: Frankfurt (eu-central-1). | USA (provider entity; hosting in the EU — Frankfurt) | EU-US DPF; 2021 SCCs |
| Neon Inc. | Managed PostgreSQL database. Stores account, subscription, Input Data, AI outputs and operational data. Region: Frankfurt, Germany (eu-central-1). | USA (provider entity; hosting in the EU — Frankfurt) | EU-US DPF; 2021 SCCs |
| Anthropic, PBC | Large language model API used to generate AI responses. Receives prompts derived from your Input Data. | USA | EU-US DPF; 2021 SCCs |
| Voyage AI (MongoDB Inc.) | Embedding model API used for semantic search and retrieval. Receives text snippets derived from your Input Data. | USA | EU-US DPF; 2021 SCCs |
| Langfuse GmbH | Observability and quality monitoring of AI calls (where enabled). May receive prompts and outputs for diagnostic purposes. | Germany (EU-region cloud where available) | EU processing where available; otherwise 2021 SCCs |
| Stripe Payments Europe Ltd / Stripe Inc. | Payment processing for subscriptions. Receives billing and payment data directly from you. | Ireland (EU) / USA | EU processing by Stripe Payments Europe Ltd; transfers to the USA covered by DPF and 2021 SCCs |
| Resend, Inc. | Transactional email delivery: account verification, password reset and account notifications. Receives your email address and the email content. | USA | EU-US DPF; 2021 SCCs |
Note on GitHub (Microsoft Corp.). We use GitHub to host our source code. GitHub does not process personal data of our end users in that capacity and is therefore not a sub-processor for the Service. It is included here for transparency.
Sub-processors used for our own operations (not for end-user data)
| Provider | Purpose | Country |
|---|---|---|
| GitHub Inc. (Microsoft Corp.) | Source code and engineering collaboration. | USA |
Transfer mechanisms
Where a sub-processor is established outside the European Economic Area, we rely on the following legal mechanisms for the transfer of personal data, in this order:
-
EU-US Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795), where the sub-processor is self-certified.
-
EU Commission Standard Contractual Clauses (Decision (EU) 2021/914), in the appropriate module, as a fallback or where the DPF is not applicable.
-
A Transfer Impact Assessment in line with EDPB Recommendations 01/2020 for each transfer, covering applicable surveillance laws of the destination country (e.g., for transfers to the USA: FISA 702, EO 12333, the CLOUD Act) and the supplementary measures we apply.
You may request a copy of the applicable clauses and our transfer impact assessment for any sub-processor at info@dikigoros.ai.
Notification of changes
We will notify users by email and update this page at least thirty (30) calendar days before any new sub-processor begins to process personal data on our behalf. To receive notifications, ensure that the email address linked to your account is current. For matters of particular sensitivity, you may also request to be added to a dedicated notification list at info@dikigoros.ai.
If you have a reasonable objection to a proposed new sub-processor on data-protection grounds, please contact us at info@dikigoros.ai within the notice period. We will work with you in good faith to address your concern, including by offering you the option to terminate your subscription before the new sub-processor begins processing your data.
Article 28 GDPR commitments
Each sub-processor listed above is bound by a written Article 28 GDPR data processing agreement that requires, among other things:
-
Processing only on our documented instructions;
-
Confidentiality undertakings by the sub-processor’s personnel;
-
Implementation of appropriate technical and organisational security measures;
-
Assistance with data-subject rights requests and security-incident response;
-
Onward sub-processing only with our prior written authorisation;
-
Return or deletion of personal data on termination.
Contact
DIKAI LTD (HE 465697)
3 Polyviou Dimitrakopoulou, 2nd Floor, Office 201, 1090 Nicosia, Cyprus
Email: info@dikigoros.ai • Telephone: +357 22210075
DPO: Nicolas Connor Georgiades — info@dikigoros.ai