Localign
Sub-processors & data location

Who we engage, and where your data lands

The current register of subprocessors, with role, country and hosting location, plus a comparison of where data actually lands per provider. Mode A is always active and keeps everything inside the EU; Mode B adds external AI models and is only activated if you turn it on yourself. We announce changes at least 30 days in advance.

Download documentsView the 84 controls
Questions about your assessment?trust@localign.com
All systems operationalService status
HostingEU (Netherlands, France)
ModelsOpen source, EU-hosted
Training on customer dataContractually prohibited
Escalation to an external modelConsent per question
Quick links
ISO 27001Sub-processor registerDPA + AI AnnexRetention scheduleFair use policyService status

Data location

Data stored exclusively in EU data centres
AI providers see Localign, never your organisation
No identifiable data outside the EU, by default
Designed around the Schrems II ruling
On-premise and air-gapped deployment available
100%
EU data centres in Mode A
0
Identifiable data outside the EU without your consent

Your data is shared with companies (called subprocessors) based in US, EU & Asia. Even where data is processed in the EU, foreign jurisdiction applies.

Your data
9 outside EU4 within EU
Source: OpenAI

Sub-processor register

Select mode

Subprocessors active in Mode A

Mode A is the default mode. As long as only Mode A is active, all Customer data stays on European infrastructure. The subprocessors below are always engaged.

Mollie B.V.Netherlands (EU)
Payment processing
EU
Privacy
Flexmail NVBelgium (EU)
Email processing
EU
Privacy
mailbox.orgGermany (EU)
Email for the AI agent at ai@localign.com: receives users' emails to the agent and sends its replies
EU
TrustPrivacy
TransIP B.V.Netherlands (EU)
Hosting of development systems, internal tooling and the sign-in service for Localign staff
EU
TrustPrivacy
Scaleway SASFrance (EU)
Hosting of the Product in the Netherlands (Amsterdam): production servers, database and document storage; open-source AI models in France
EU
TrustPrivacy
Scaleway SAS (Transactional Email)France (EU)
Transactional email: sign-in codes, password resets and invitations
EU
TrustPrivacy
Nebius B.V. (EU infrastructure)Netherlands (EU)
Open-source AI model provider. No longer used by Localign; being removed from this list.
EU
TrustPrivacy
Nebul B.V.Netherlands (EU)
Open-source AI model provider
EU
TermsPrivacy

Change procedure

We notify customers at least 30 calendar days before adding or replacing a subprocessor (DPA article 9.4).
Customers can object on the grounds set out in DPA article 9.5.
For changes that are necessary for service continuity or security and cannot wait 30 days, we notify as soon as possible and explain why (DPA article 9.4, second paragraph).
For external AI models, the announcement is made on this page, and customers who activated the model also receive a direct notice (AI Addendum article 4.4).

References

Another question about your assessment?

We usually answer questions from CISOs, DPOs and procurement teams within two working days.

trust@localign.comBook a demo