Annex 2 to DPA — Version 1.1 — As of: May 29, 2026   |   Deutsche Version

The following sub-processors are engaged by VIAVENDO.AI (“Processor”) for the provision of the VIAVENDO.AI Cloud platform pursuant to §9 of the Data Processing Agreement (DPA):

No.	Name and Address	Description of Service	Appropriate Safeguards (Third Country Transfers)
1	Hetzner Online GmbH Industriestr. 25 91710 Gunzenhausen Germany	Cloud Hosting & Infrastructure Falkenstein/Nuremberg data centers, ISO 27001 certified	EU Member State No third country transfer
2	OpenAI, LLC 3180 18th St San Francisco, CA 94110 USA	AI Language Models (LLM): GPT models Zero Data Retention (ZDR) API	EU-US Data Privacy Framework + Standard Contractual Clauses (SCCs)
3	Anthropic PBC 548 Market Street San Francisco, CA 94104 USA	AI Language Models (LLM): Claude models	EU-US Data Privacy Framework + Standard Contractual Clauses (SCCs)
4	Google Ireland Limited Gordon House, Barrow Street Dublin 4 Ireland	AI Language Models (LLM): Gemini models (Vertex AI)	EU Member State (+ EU-US Data Privacy Framework + SCCs for US transfers)
5	Hetzner Online GmbH Industriestr. 25 91710 Gunzenhausen Germany	Email Infrastructure: Mailcow for system notifications	EU Member State No third country transfer
6	Deepgram, Inc. 548 Market St, Suite 25104 San Francisco, CA 94104 USA	Speech-to-Text: Transcription of audio/voice recordings (e.g. telephony and call recordings) into text for further processing and analysis. No data used for training (Model Improvement Program is opt-in, not enabled)	Standard Contractual Clauses (SCCs)
7	ElevenLabs, Inc. 169 Madison Ave #2484 New York, NY 10016 USA	Text-to-Speech: Synthesis of speech output from text (e.g. voicing of coaching and analysis content). No data used for training per API terms	EU-US Data Privacy Framework + Standard Contractual Clauses (SCCs)
8	Black Forest Labs Inc. 2261 Market Street STE 22997 San Francisco, CA 94114 USA	AI Image Generation (Text-to-Image): Generation and editing of images from text prompts (FLUX models) via the API (api.bfl.ai). No data used for training per API terms	Standard Contractual Clauses (SCCs)
9	Perplexity AI, Inc. 115 Sansome St, Suite 900 San Francisco, CA 94104 USA	AI Web Search & Answer Generation: Answering queries with real-time web search and AI-assisted summarization. Queries are transmitted to the API. No data used for training (API/Enterprise terms)	EU-US Data Privacy Framework + Standard Contractual Clauses (SCCs)

Notes

• (1) API connections to AI providers (No. 2–4, 8–9) and voice-processing providers (No. 6–7) are configured with no-training guarantees. Customer data sent to these providers is not used for model training purposes.
• (2) The specific LLM providers used depend on the Customer’s selected plan and configuration. Not all providers listed above are necessarily used for every customer instance.
• (3) The Controller may object to changes in sub-processors within 14 days in accordance with §9(3) of the DPA.
• (4) For transfers to third countries, VIAVENDO.AI ensures compliance with GDPR Chapter V requirements through the appropriate safeguards listed above.

← Back to Data Processing Agreement (DPA)