Last updated: March 2026 · Version 1.0
This list sets out the sub-processors engaged by Require ApS to deliver the conexor.io platform, maintained in accordance with our Data Processing Agreement. Customers are notified of additions or replacements with at least 30 days' prior notice.
| Name | Purpose | Data Types Processed | Location | Transfer Mechanism |
|---|---|---|---|---|
| Microsoft Azure Microsoft Ireland Operations Ltd. | Platform hosting, PostgreSQL database, Azure Communication Services (transactional email) | Account data, audit logs, encrypted connection strings, email notification content | EU — West Europe (Netherlands) | Within EU/EEA — no transfer |
| Stripe, Inc. | Payment processing, subscription management, invoicing | Invoice details, email address, subscription ID (card data handled by Stripe; Require ApS never receives card details in plain text) | USA | Standard Contractual Clauses (SCCs, Decision 2021/914/EU) |
| Anthropic, Inc. | AI models (Claude) for relay-chat and AI-generated database descriptions | User-initiated relay-chat queries, metadata for generating descriptions | USA | Standard Contractual Clauses (SCCs, Decision 2021/914/EU) |
| OpenAI, LLC | Embedding models for semantic search on platform-internal content | Platform-internal texts for embedding (not customer database content) | USA | Standard Contractual Clauses (SCCs, Decision 2021/914/EU) |
Microsoft is certified under EU GDPR and provides EU Data Boundary commitments, ensuring that data processed by Azure services within EU regions remains within the EU/EEA.
Stripe is PCI DSS Level 1 certified. SCCs are implemented as part of Stripe's standard agreement with EU customers. Require ApS does not store or process card details.
Anthropic processes only queries actively sent by users via the relay-chat feature, and platform-internal text for generating database descriptions. Customers' raw database content is not transmitted to Anthropic.
OpenAI is used exclusively for embedding models applied to platform-internal texts (e.g., schema descriptions generated by the platform). Customers' actual database content is not transmitted to OpenAI.
We will notify data controller customers of planned changes (additions, replacements, or removals of sub-processors) by email to the registered contact with at least 30 days' prior notice.
Customers may raise a written objection to any change within the notice period. To object or for questions, contact [email protected].