List of sub-processors
Version 2026-10-v2 of 14 October 2026
Source: https://app.content-ai.net/dokumenty/podprzetwarzajacy?lang=en

The entities to which Content AI entrusts the processing of personal data entered by Users, under the data processing agreement (https://app.content-ai.net/dokumenty/dpa?lang=en) (section 4). We inform you by email at least 14 days before adding or replacing an entity.

All accounts

| Entity | Scope | Location | Transfer basis outside the EEA |
| Hetzner Online GmbH | the Service's server: Account data, Knowledge Base, backups | Germany | not applicable |
| Resend, Inc. | sending emails about the Account | USA | EU-U.S. Data Privacy Framework, standard contractual clauses |
| Stripe Payments Europe, Limited | payments (payer data, no Knowledge Base data) | Ireland, USA | EU-U.S. Data Privacy Framework, standard contractual clauses |
| Cloudflare, Inc. | domain name services and delivery of the content-ai.net site; the app at app.content-ai.net bypasses the Cloudflare network | USA, global network | EU-U.S. Data Privacy Framework, standard contractual clauses |

Generation on the Provider's keys

Accounts created by the Provider before self-service registration was available may generate content on the Provider's API keys. Self-created Accounts write their first article without an API Key on the Provider's key (Terms of Service, section 3(4)). In that case the following are also sub-processors (for the first article without an API Key, Anthropic only):

| Entity | Scope | Location | Transfer basis outside the EEA |
| Anthropic Ireland, Limited (and Anthropic, PBC) | text generation | Ireland, USA | standard contractual clauses (Anthropic DPA) |
| OpenAI Ireland Ltd (and OpenAI OpCo, LLC) | images, speech synthesis, transcription | Ireland, USA | standard contractual clauses or adequacy decision (OpenAI DPA) |

Own API keys

When a User uses their own API Key (Anthropic, OpenAI, ElevenLabs), the provider processes the data under an agreement concluded directly with the User and is not a sub-processor of the Provider (data processing agreement, section 4(4)). Self-created Accounts work on their own API Keys, except for the first article without an API Key (Terms of Service, section 3(4)).

Change history

| Version | Date | Change |
| 2026-10-v1 | 9 October 2026 | first version of the list |
| 2026-10-v2 | 14 October 2026 | Anthropic also for the first article without an API Key on self-created Accounts |