Subprocessors
Effective from: 9.11.2026
This page lists the other processors (subprocessors) that ELIA, s.r.o. engages to provide the ELIA Assistant service and that may process personal data on behalf of our customers. It is the list referred to in section 9 of our Data processing agreement.
Core service
These providers are involved in every account.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Microsoft Azure | Hosting of the API and dashboard, application monitoring (Application Insights) | All service data while it is processed, technical logs | EU (Netherlands) |
| Supabase | Database, user sign-in, storage of uploaded files | All stored service data: messages, interactions, contacts, knowledge base, user accounts | EU (Ireland) |
| n8n | Workflow automation that receives messages from channels and runs the AI assistant | Message content, conversation context, contact identifiers | EU (Germany) |
| OpenRouter | AI model gateway: generating replies, classifying messages, structuring knowledge base pages | Message content, conversation context, knowledge base content | EU |
| Better Stack | Log collection and error monitoring | Technical logs, which may contain identifiers such as IDs or IP addresses | EU (Germany) |
| Websupport | Sending service emails: invitations, password resets, notifications | Recipient email address, email content | EU (Slovakia) |
All AI requests go through OpenRouter's EU routing and are processed in the EU. Customer data is not used to train foundation AI models, as set out in the Data processing agreement.
Specific features
These providers are involved only when the related feature is used.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Stripe | Subscription payments and invoicing | Billing contact details, payment details (card data goes directly to Stripe and never passes through ELIA servers) | EU (Ireland), USA |
| Firecrawl | Reading web pages you add as knowledge base sources | Content of those pages | USA |
| PostHog | Product analytics of sign-up and onboarding steps | User and account identifiers, events | EU (Germany) |
| Cloudflare | Bot protection (Turnstile) on the sign-up form | IP address, browser data | Global |
| jsDelivr | Delivering the chat widget's code to website visitors' browsers | Visitor IP address | Global |
Communication channels
When you connect one of these channels, messages and the identifiers of the people writing them pass through that channel's provider:
- WhatsApp: Meta and Twilio
- Telegram
- Slack
- Microsoft Teams: Microsoft
Systems you connect through integrations, such as your mailbox, CRM, calendar, booking system or e-shop, are your own providers. ELIA exchanges data with them only as your configuration instructs.
Transfers outside the EEA
Where a provider or its infrastructure is located outside the European Economic Area, the transfer relies on a mechanism under the GDPR, such as an adequacy decision or standard contractual clauses, as described in section 10 of the Data processing agreement.
Changes to this list
We update this page whenever we add or replace a subprocessor, and change the date at the top. If a change materially affects the processing risk, we notify customers in advance, and a customer may object as described in section 9 of the Data processing agreement.
Questions about this list are welcome at contact@elia.sk.