List of Subprocessors (Updated November 2025)
This is a list of Subprocessors we work with to provide our services.
Legal Entity: Company.info BI GmbH
Purpose of Data Transfer: Requesting publicly available information of individuals and entities stored in public data sources like commercial trade registers. Screening & monitoring entities and contacts against sanctions, watchlists, PEPs, and negative news.Location: Tonhallenstr. 14–15, 40211 Düsseldorf, GermanyWebsite: https://companyinfo.de/
Legal Entity: Klippa App B.V.
Purpose of Data Transfer: OCR services used to parse identification documents. Klippa does not store any of the personal data transferred other than for the scanning process.Location: Lübeckweg 2, 9723 HE Groningen, NetherlandsWebsite: https://www.klippa.com/de/texterkennung-ocr/
Legal Entity: Microsoft Ireland Operations Ltd
Purpose of Data Transfer: Microsoft Azure provides cloud computing infrastructure required for the provision of the Services on their servers in the West Europe region. We are using Microsoft Azure servers in Frankfurt (Germany West Central).Location: One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, IrelandWebsite: https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA?lang=14&year=2021
Legal Entity: MongoDB Limited
Purpose of Data Transfer: MongoDB operates the database services provided through our servers on Amazon Web Services (AWS) or Microsoft Azure (see above).Location: Building Two, Number One Ballsbridge, Ballsbridge, Dublin 4, IrelandWebsite: https://www.mongodb.com/cloud/trust/compliance/gdpr
Legal Entity: Northdata GmbH
Purpose of Data Transfer: Requesting publicly available information of individuals and entities stored in public data sources like commercial trade registers.Location: Hermannstraße 22, D-20095 Hamburg, GermanyWebsite: https://www.northdata.de/_coverage
Legal Entity: Burkom Solutions GmbH
Purpose of Data Transfer: Accessing the DATEV desktop and online APIs quickly and easily via the cloud and gaining bidirectional access to comprehensive DATEV data.Location: Schrannenstr. 4, D-86150 Augsburg, GermanyWebsite: https://www.burkom.de/datev-in-kanzleien,18
Legal Entity: Kerberos Compliance GmbH
Purpose of Data Transfer: Execution of expert KYC (Know Your Customer) reviews for complex corporate structures and international shareholdings. Services include structural and registry analysis, UBO identification, adverse media screening, and risk assessment.Location: Aachener Straße 1, 50674 Köln, GermanyWebsite: https://www.kerberos-compliance.de
Legal Entity: Verifeye.Online Ltd.
Purpose of Data Transfer: Automated identity and document verification services. Provides verification of ID documents and personal data through secure, encrypted processes.Location: Lāčplēša iela 20A, LV-1011 Riga, LatviaWebsite: https://verifeye.online
Legal Entity: Scoria Labs GmbH
Purpose of Data Transfer: Provision of Captcha and security verification services to prevent spam, bot activity, and automated abuse in form submissions. Only technical metadata (e.g. IP address, browser characteristics, and interaction data) are processed.Location: Agnes-Bernauer-Straße 151, 80687 München, GermanyWebsite: https://scoria.io
Legal Entity: OpenAI, L.L.C.
Purpose of Data Transfer: Provision of large language model processing services (AI-assisted data enrichment, classification, and compliance workflow automation) under contract with BetterCo AI GmbH. Data processing occurs solely within the agreed EU region data center infrastructure.Location: Stockholm, SwedenWebsite: https://openai.com
All subprocessors operate under data processing agreements in accordance with Art. 28 GDPR. Changes to this list will be communicated to customers in advance as required by law.
