Subprocessors
Last updated 15 September 2026. These are the companies that process customer data on behalf of Ahel Technologies OÜ, what each one does for ahel, what reaches it, and where it runs. The list is part of our data processing addendum.
Always on
Running ahel at all means these four handle some of your data.
Contabo GmbH
Hosting: the application servers, the database, encrypted credentials, and backups.
- Data
- All workspace data at rest.
- Region
- Germany (EU)
Cloudflare, Inc.
Edge network: DNS, TLS, caching, bot protection, and object storage (R2) for the public catalog.
- Data
- Request metadata in transit (IP address, headers); the object store holds public catalog data only.
- Region
- Global edge network; a US company operating under EU data-processing terms
Stripe Payments Europe, Ltd.
Card payments, subscriptions, invoices, and VAT handling.
- Data
- Billing name, email address, tax id, and payment details (card numbers never reach ahel).
- Region
- Ireland (EU), with Stripe, Inc. in the United States
Twilio SendGrid
Transactional email: sign-in links, invites, receipts, and workspace notices.
- Data
- Email address and the contents of the notice.
- Region
- United States
Only when you choose them
These are reached only when a workspace turns the feature on: a crypto top-up, ahel-supplied AI, a provider on your own key, Sign in with Google, or accepting analytics.
NOWPayments
Cryptocurrency top-ups of the prepaid balance.
- Data
- The order reference and amount; the payment itself happens on the chain you choose.
- Region
- Estonia (EU)
OpenRouter, Inc.
Model routing when a workspace uses ahel-supplied AI for Cloud Agents and hosted tools.
- Data
- The prompts and tool results of those runs.
- Region
- United States; the model behind a request runs where that provider runs
The model providers a workspace connects on its own key
Anthropic, OpenAI, and every other provider you add: they answer the requests your gateway forwards.
- Data
- The prompts and tool results you send them, under that provider's own terms.
- Region
- Per provider, mostly United States
Google Ireland Limited
Sign in with Google, and optional site analytics after you accept them.
- Data
- The Google account email and profile name for sign-in; pseudonymous page views for analytics.
- Region
- Ireland (EU), with Google LLC in the United States
Changes to this list
Before a new subprocessor handles customer data we update this page and email workspace owners who hold a signed data processing addendum, at least 30 days ahead. If you object, write to privacy@ahel.ai within that window and we will work out an alternative or let you end the affected service without penalty.
How we handle personal data is in the privacy policy; the processor terms are in the data processing addendum.