Skip to content
Draft

Subprocessors

The service providers that process personal data for Arlo: what for, where, and on what terms. The data processing agreement refers to this list.

This text is a draft awaiting legal review. Marked gaps are filled in by the company before publication.

  • Anthropic

    Active
    Purpose
    Language models for Arlo’s work for your company account: preparing documents, drafting messages, classifying replies.
    Company
    Anthropic Ireland, Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland
    Location
    Anthropic stores data in the US and may process requests in the US, Europe, Asia and Australia.
    Safeguards
    EU Standard Contractual Clauses (modules 2 and 3), data processing addendum: www.anthropic.com/legal/data-processing-addendum.
    Data use
    Anthropic may not use your data to train its models. Anthropic deletes inputs and outputs within 30 days. Longer only where needed to enforce its usage policy (flagged data up to 2 years) or where the law requires it.
  • Hostinger

    Chosen
    Purpose
    Server and database for Arlo and this website.
    Company
    To be filled in: [contracting entity]
    Location
    Frankfurt, Germany
    Safeguards
    Processing in the EU.
  • Scaleway Transactional Email

    Chosen
    Purpose
    Sign-in links and notifications to you and your team.
    Company
    To be filled in: [contracting entity]
    Location
    Paris region, France
    Safeguards
    Processing in the EU.
  • PostHog

    Chosen
    Purpose
    Error reports and product analytics, metadata only: no message text, no data about your contacts.
    Company
    To be filled in: [contracting entity]
    Location
    EU cloud
    Safeguards
    To be filled in: [safeguards]
  • Linkup

    Proposed
    Purpose
    Web searches for research about companies.
    Company
    To be filled in: [contracting entity]
    Location
    EU
    Safeguards
    Processing in the EU.
  • Bouncer

    Proposed
    Purpose
    Checking that an email address exists before Arlo writes to it.
    Company
    Bouncer Sp. z o.o., Wrocław, Poland
    Location
    Frankfurt, Germany
    Safeguards
    Not transferred outside the EU.
    Data use
    Deleted after at most 60 days.
  • To be filled in: [backup storage provider]

    Not chosen yet
    Purpose
    Off-site backups of the database, encrypted before they leave the server: the storage provider cannot read them.
    Company
    To be filled in: [contracting entity]
    Location
    To be filled in: [location]
    Safeguards
    To be filled in: [safeguards]

Status

Active
The provider Arlo runs on.
Chosen
Decided, not yet processing data.
Proposed
Our current choice, confirmed after a test; not yet processing data.
Not chosen yet
No provider has been chosen.

Changes

Before another language-model provider takes over, the owners of every company account receive an email naming it, at least 30 days in advance.

The data processing agreement: To be filled in: [link to the agreement].