Localign
Sub-processors & data location

Who we engage, and where your data lands

The current register of subprocessors, with role, country and hosting location, plus a comparison of where data actually lands per provider. Mode A is always active and keeps everything inside the EU; Mode B adds external AI models and is only activated if you turn it on yourself. We announce changes at least 30 days in advance.

Download documentsView the 84 controls
Questions about your assessment?trust@localign.com
All systems operationalService status
HostingEU (Netherlands, France)
ModelsOpen source, EU-hosted
Training on customer dataContractually prohibited
Escalation to an external modelConsent per question
Quick links
ISO 27001Sub-processor registerDPA + AI AnnexRetention scheduleFair use policyService status

Data location

Data stored exclusively in EU data centres
AI providers see Localign, never your organisation
No identifiable data outside the EU, by default
Designed around the Schrems II ruling
On-premise and air-gapped deployment available
100%
EU data centres in Mode A
0
Identifiable data outside the EU without your consent

Your data is shared with companies (called subprocessors) based in US, EU & Asia. Even where data is processed in the EU, foreign jurisdiction applies.

Your data
9 outside EU4 within EU
Source: OpenAI

Sub-processor register

Select mode

Subprocessors active in Mode A

Mode A is the default mode. As long as only Mode A is active, all Customer data stays on European infrastructure. The subprocessors below are always engaged.

Mollie B.V.Netherlands (EU)
Payment processing
EU
Privacy
Flexmail NVBelgium (EU)
Email processing
EU
Privacy
TransIP B.V.Netherlands (EU)
Hosting infrastructure for the Product (Mode A)
EU
TrustPrivacy
Scaleway SASFrance (EU)
Open-source AI model provider
EU
TrustPrivacy
Nebius B.V. (EU infrastructure)Netherlands (EU)
Open-source AI model provider
EU
TrustPrivacy

Change procedure

We notify customers at least 30 calendar days before adding or replacing a subprocessor (DPA article 11.4).
Customers can object on the grounds set out in DPA article 11.5.
For changes that are necessary for service continuity or security and cannot wait 30 days, we notify as soon as possible and explain why (DPA article 11.4 second paragraph).

References

Another question about your assessment?

We usually answer questions from CISOs, DPOs and procurement teams within two working days.

trust@localign.comBook a demo