# Sub-processor List

| | |
|---|---|
| Organisation | IVERIOS OÜ |
| Version | 1.0 — 6 November 2026 |
| Classification | Public |

IVERIOS uses the following sub-processors to provide its services. Customers are informed of intended changes at least 30 days in advance.

| Sub-processor | Purpose | Data | Location | Transfer safeguard |
|---|---|---|---|---|
| Ostendo Consulting d.o.o. (Zagreb, Croatia) | Development, operation and support of IVERIOS services on behalf of IVERIOS OÜ | All service data (operational access) | Croatia (EU) | EU |
| Hetzner Online GmbH (Germany) | Infrastructure hosting (servers, storage) | All service data | Germany (EU) | EU |
| Microsoft Ireland Operations Ltd | E-mail delivery (Microsoft 365 / Graph), staff identity (Entra ID) | Names, e-mail addresses, e-mail content | European Union | EU; Microsoft DPA |
| Anthropic PBC (USA) | AI processing (Claude API): classification, translation, content suggestions, questionnaires, assistant, redaction | Content sent for the specific AI task (published trust center content, uploaded documents, questions) | United States | Standard Contractual Clauses; not used for model training |
| Revolut Bank UAB (Lithuania) | Payment processing for credit purchases and licences (card payments — being introduced) | Billing contact, payment data | European Union | EU |
| TIG revizija (Croatia) | Accounting and bookkeeping | Billing data (company, invoices, payments) | Croatia (EU) | EU |

Notes:
- TLS certificates are issued by Let's Encrypt; no customer data is shared with it.
- Source code is hosted on GitHub; no customer data is stored there.