Sub-processors
The parties Briefbee uses to process personal data. See also the data processing agreement.
1. Current sub-processors
| Party | Used for | Data | Location |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, database, file storage, AI verification and speech-to-text when dictating (Workers AI), AI gateway, login email, the quote emails the contractor sends to their customers, the public quote page and bot protection at sign-in | All data in the app, and the user's email address for login emails, the customer's name and email address and the quote PDF in a quote email, plus the IP address and browser signals used by the bot check at sign-in | Database and file storage in the EU (Cloudflare's EU jurisdiction); the app itself runs on Cloudflare's global network |
| Anthropic, PBC (USA; for customers in the EEA the contracting party is Anthropic Ireland, Limited) | Claude, a language model that drafts quotes, answers in the chat and reads the extracted text of uploaded documents. Not used to train models; Anthropic deletes inputs and outputs from its systems within 30 days (longer only for flagged policy violations) | The job description, briefs, chat messages, the quote wording and the text of documents the contractor uploads (an old quote can still hold customer details at that moment) | Worldwide processing, including the United States (the Claude API has no EU-only option) |
| Mistral AI (Mistral AI SAS, France) | Text recognition (OCR) of uploaded documents, so tables keep their rows and columns. Also the backup language model: when Claude cannot answer, the same text goes to a Mistral model instead, so the service keeps working. Not used to train models; data is deleted after processing | The pages of the uploaded document as the contractor sent them (an old quote can still hold customer details at that moment). As backup language model: the same data as Claude receives | EU (Mistral's EU endpoint) |
| Sentry (Functional Software, Inc., USA) | Error reports from the app and the server, so we see and fix what breaks. No session recordings | The technical error, the place in the code, the page or API path, and the browser and system type. Names, email addresses, phone numbers, cookies, form contents and quote texts are removed before a report is sent | EU (Sentry's EU data region, Germany) |
| PostHog (PostHog, Inc., USA) | Product analytics: which actions and screens are used, so we can improve the app. No cookies or browser storage, no session recordings | The action taken and the screen opened, with the account id, the quote id and the browser type. No IP address, names, contact details or quote texts | EU (PostHog's EU cloud, Germany) |
| TypeSafe (typesafe.ai) | The verification model (Jev) that checks the AI's drafts and the answers in the chat, reached through Cloudflare's AI service, without data retention | The job description, chat messages and the quote wording being checked | [Location — to be confirmed] |
2. Your accounting software is not a sub-processor
Your accounting software (Moneybird, Informer, e-Boekhouden) is your own service. Only when you connect it do we send a quote or an invoice there, on your instruction. You have your own agreement with that provider.
3. Transfer to the United States
Anthropic processes data worldwide, including in the United States. Safeguard for this transfer: the standard contractual clauses (Module Two and Three) in Anthropic's data processing addendum, which is part of its commercial terms. We send only the job description, briefs, chat messages, quote wording and the text of documents you upload.
Sentry and PostHog store their data in their EU regions; their staff in the United States can reach it for support. Safeguard: the standard contractual clauses in each one's data processing addendum. Neither receives names, contact details or quote texts.
4. Changes
We tell you at least 30 days beforehand if we add or replace a sub-processor. You can then object via hallo@briefbee.nl or close your account.