Last updated: September 21, 2026
Epode AB (Palpable) uses the following sub-processors to deliver the service. Each processes personal data only on our instructions and under a data processing agreement (GDPR Art. 28). We will update this page before adding or replacing a sub-processor; you can object to a change by contacting us at privacy@palpable.technology.
| Sub-processor | Purpose | Personal data | Location |
|---|---|---|---|
| Nhost (Hasura/PostgreSQL) | Database, authentication | Account data, conversations, device & sensor data, scripts | EU (Frankfurt, Germany) |
| Hetzner Online GmbH | Cloud infrastructure (AI agent containers, observability) | Conversations and sensor data in transit, service logs | EU (Germany) |
| OpenAI, L.L.C. | AI model inference (assistant replies, script generation and review) | Conversation content, connected-hardware context | USA (EU-US Data Privacy Framework) |
| Scaleway SAS | AI model inference (pre-activation preview chat) | Conversation content | EU (France) |
| Anthropic PBC | Waitlist application review | Waitlist form responses | USA (EU-US Data Privacy Framework) |
| Microsoft Corporation | Text-to-speech (PAL's spoken voice) | Text of PAL's replies | USA (EU-US Data Privacy Framework) |
| Gladia SAS | Speech-to-text (voice features, opt-in) | Voice audio (streamed, not stored) | EU (France) |
| Paddle.com Market Limited | Payments and merchant of record (seller of record, billing, VAT) | Payment and billing data, purchase history | UK (UK adequacy decision); EU entity Paddle Payments Limited, Ireland |
| LiveKit, Inc. | Real-time voice transport (voice features, opt-in) | Voice session media (in-memory only) | USA (EU-US Data Privacy Framework) |
| Cloudflare, Inc. | Website hosting, content delivery, DDoS protection | Web traffic metadata (IP addresses) | Global (EU-US Data Privacy Framework) |
Self-hosted on our own EU infrastructure (not sub-processors): email/newsletter (Listmonk), AI observability (Langfuse), feature flags (Unleash), web search (SearXNG). See our Privacy Policy for full details on data handling and your rights.