Draft
Subprocessors
The service providers that process personal data for Arlo: what for, where, and on what terms. The data processing agreement refers to this list.
This text is a draft awaiting legal review. Marked gaps are filled in by the company before publication.
Anthropic
Active- Purpose
- Language models for Arlo’s work for your company account: preparing documents, drafting messages, classifying replies.
- Company
- Anthropic Ireland, Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland
- Location
- Anthropic stores data in the US and may process requests in the US, Europe, Asia and Australia.
- Safeguards
- EU Standard Contractual Clauses (modules 2 and 3), data processing addendum: www.anthropic.com/
legal/ data-processing-addendum. - Data use
- Anthropic may not use your data to train its models. Anthropic deletes inputs and outputs within 30 days. Longer only where needed to enforce its usage policy (flagged data up to 2 years) or where the law requires it.
Hostinger
Chosen- Purpose
- Server and database for Arlo and this website.
- Company
- To be filled in: [contracting entity]
- Location
- Frankfurt, Germany
- Safeguards
- Processing in the EU.
Scaleway Transactional Email
Chosen- Purpose
- Sign-in links and notifications to you and your team.
- Company
- To be filled in: [contracting entity]
- Location
- Paris region, France
- Safeguards
- Processing in the EU.
PostHog
Chosen- Purpose
- Error reports and product analytics, metadata only: no message text, no data about your contacts.
- Company
- To be filled in: [contracting entity]
- Location
- EU cloud
- Safeguards
- To be filled in: [safeguards]
Linkup
Proposed- Purpose
- Web searches for research about companies.
- Company
- To be filled in: [contracting entity]
- Location
- EU
- Safeguards
- Processing in the EU.
Bouncer
Proposed- Purpose
- Checking that an email address exists before Arlo writes to it.
- Company
- Bouncer Sp. z o.o., Wrocław, Poland
- Location
- Frankfurt, Germany
- Safeguards
- Not transferred outside the EU.
- Data use
- Deleted after at most 60 days.
To be filled in: [backup storage provider]
Not chosen yet- Purpose
- Off-site backups of the database, encrypted before they leave the server: the storage provider cannot read them.
- Company
- To be filled in: [contracting entity]
- Location
- To be filled in: [location]
- Safeguards
- To be filled in: [safeguards]
Status
- Active
- The provider Arlo runs on.
- Chosen
- Decided, not yet processing data.
- Proposed
- Our current choice, confirmed after a test; not yet processing data.
- Not chosen yet
- No provider has been chosen.
Changes
Before another language-model provider takes over, the owners of every company account receive an email naming it, at least 30 days in advance.
The data processing agreement: To be filled in: [link to the agreement].