Sub-Processors

This list identifies third parties that Elevon engages to process data in delivering the platform, in accordance with Art. 28(2) GDPR. We update this list when we engage new sub-processors.

Infrastructure & hosting

• Cloud hosting & database: Base44 platform infrastructure — hosts the application, database, and file storage (EU/EEA regions where available).

Payments

• Payment processing: Stripe — processes subscription payments and billing. PCI-DSS compliant. Card data never touches Elevon servers.

AI & analytics

• AI model providers: selected large language model APIs (e.g. OpenAI, Anthropic, Google) used to generate analysis and insights. Data is processed server-side via API calls and is not used to train third-party models.
• Product analytics: privacy-respecting first-party analytics (only where consented via the cookie banner).

International transfers

Where a sub-processor processes data outside the EEA, we rely on Standard Contractual Clauses (Art. 46 GDPR) or an adequacy decision, with supplementary safeguards where required.

Changes to this list

We will notify customers of new or replaced sub-processors. Customers may object by contacting info.elevon@proton.me.