Sub-processors
This page lists the sub-processors that Baby Elephant B.V., trading as Aitonomy (“Aitonomy”), engages to process Customer Data in connection with the Aitonomy platform (the “Service”). These third parties are sub-processors within the meaning of the GDPR. Terms written with a capital that are not defined here have the meaning given in the SaaS Terms and Conditions and the Data Processing Agreement for the Service.
This list covers sub-processors that process Customer Data in connection with the Service. The processing of the personal data of visitors to our website is described in our Privacy Statement.
By default, the Agents run on models that Aitonomy self-hosts within the European Economic Area; in that configuration no third-party AI model provider processes Customer Data. Where a Customer chooses to use a hosted third-party model, the corresponding provider below is engaged as a sub-processor for that Customer only. Such providers are marked Optional.
Current sub-processors
| Sub-processor | Purpose | Location | Transfer basis |
|---|---|---|---|
| Scaleway SAS | Cloud hosting: hosting, storage and processing of Customer Data for the Service. | France; Netherlands (Amsterdam) | Within EEA |
| Mistral AI SAS Optional | AI model provider. Processing of prompts and related inputs submitted to Agents, where the Customer opts to use Mistral models. | France | Within EEA |
| Aleph Alpha GmbH Optional | AI model provider. Processing of prompts and related inputs submitted to Agents, where the Customer opts to use Aleph Alpha models. | Germany | Within EEA |
| Microsoft Ireland Operations Ltd — Azure OpenAI Service Optional | AI model provider. Processing of prompts and related inputs submitted to Agents in an EU region, where the Customer opts to use models hosted on Azure OpenAI. | EU region (EEA) | Within EEA; SCCs for any access by the provider’s non-EEA group |
| Amazon Web Services EMEA SARL — Bedrock Optional | AI model provider. Processing of prompts and related inputs submitted to Agents in an EU region, where the Customer opts to use models hosted on AWS Bedrock. | EU region (EEA) | Within EEA; SCCs for any access by the provider’s non-EEA group |
Updates
As our business develops, our sub-processors may change. Where a change is relevant, we will update this list and give notice to our customers as required under the Data Processing Agreement. A customer may object to an intended change on reasonable data protection grounds within five (5) Business Days of the notice, as set out in the Data Processing Agreement.