Subprocessors
The service providers that handle personal data for AssetHermit, what each receives, and where.
Effective
Our subprocessors
Each provider handles only what it needs for its purpose, under a contract that protects the data as our Data Processing Addendum requires.
| Provider | What for | Receives | Where |
|---|---|---|---|
| Amazon Web ServicesAmazon Web Services EMEA SARL | Hosting, storage, email delivery (Amazon SES) and the AI assistant's model (Amazon Bedrock) | Everything AssetHermit holds, encrypted with each organization's and workspace's own key | Each organization's and workspace's own region; our control plane in Stockholm. The assistant's model within the workspace's geography (the EU or the US) |
| StripeStripe Payments Europe, Limited | Payments, invoices and tax | The owner's name and email, billing details and payment method | EU, US |
| Google WorkspaceGoogle Cloud EMEA Limited | Our own email, including support and privacy requestsWhen someone emails us | What people write to us | EU, US |
| Google sign-inGoogle Ireland Limited | Signing in with a Google accountWhen a person chooses to sign in with Google | That the person signs in to AssetHermit | EU, US |
| Microsoft sign-inMicrosoft Ireland Operations Limited | Signing in with a Microsoft Entra ID accountWhen a person chooses to sign in with Microsoft | That the person signs in to AssetHermit | EU, US |
| SlackSlack Technologies Limited | Notifications in the customer's SlackWhen a workspace connects Slack | Notification text (names, counts, amounts) and button clicks | US |
When the list changes
We email organization owners 30 days before a new subprocessor starts handling customer data, and publish the new list here. An organization that objects can end the agreement before the change takes effect. Questions go to privacy@assethermit.com.