Legal
Subprocessors
This is an English translation for your convenience. The German version is legally binding.
These are all the companies that process personal data on our behalf to run Routira: what each one does, which data it receives, where it processes it, and which safeguard applies to transfers outside the EU. For business customers, this list is Annex 2 of our data processing agreement.
The list
| Company | Service | Data | Location | Transfer safeguard |
|---|---|---|---|---|
| Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA | Hosting of routira.com, app.routira.com and the API | Everything the app sends and receives while serving you, including mail content in transit; request logs with IP addresses | Frankfurt, Germany (region fra1); static files through a worldwide network | Data processing agreement with EU Standard Contractual Clauses; EU-U.S. Data Privacy Framework |
| Databricks, Inc. (parent company of Neon, LLC), 160 Spear Street, 15th Floor, San Francisco, CA 94105, USA | Postgres database (Neon) | Account data, message text and metadata, data derived from mail (for example summaries and priorities), search index, encrypted mailbox credentials | AWS region eu-central-1, Frankfurt, Germany | Data processing agreement with EU Standard Contractual Clauses and Neon schedule; EU-U.S. Data Privacy Framework |
| Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA | Object storage (R2) for original messages and attachments | Original messages and attachments, encrypted by Routira before upload, so Cloudflare can't read them | EU (R2 with EU jurisdiction) | Data processing agreement with EU Standard Contractual Clauses; EU-U.S. Data Privacy Framework |
| OVH GmbH, Oskar-Jäger-Str. 173/K6, 50825 Köln, Germany | Server for our job runner (a Trigger.dev instance we operate ourselves): syncing, sending, reminders, notifications | Mail content in memory while a job runs; job records and logs | Germany | No transfer outside the EU; data processing agreement |
| OVH GmbH (OVHcloud), Cologne, Germany | Letterpier infrastructure for sending and receiving email (application, worker, mail server and backups) | Sender and recipient addresses, content and metadata of emails sent or received | Germany (EU); default message retention 30 days, seven daily backup recovery points | Contract terms; Letterpier subprocessors |
| Bird B.V. (Pusher), Keizersgracht 268, 1016 EV Amsterdam, Netherlands; service operated by Pusher Ltd and MessageBird UK Limited, London, United Kingdom | Realtime signals between devices | Technical IDs only (for example of a conversation or a workspace), no mail content | EU cluster, Ireland | Data processing agreement with EU Standard Contractual Clauses; adequacy decision for the United Kingdom |
| OpenAI Ireland Ltd, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland; processing by OpenAI OpCo, LLC and its affiliates, USA | AI features | The text each AI task needs (for example subject, names and addresses, message text, your questions) and the results | USA | Data processing agreement with EU Standard Contractual Clauses for the transfer to the USA. Storage of requests is switched off and data isn't used for training; OpenAI may keep requests for up to 30 days to detect abuse |
| Google Cloud EMEA Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland; processing by Google LLC and its affiliates | Gmail push through Cloud Pub/Sub, only when it is switched on | The notice that a connected Gmail mailbox changed: the address and the mailbox's history number, no mail content | EU (Pub/Sub message storage policy) | Cloud Data Processing Addendum with EU Standard Contractual Clauses; EU-U.S. Data Privacy Framework |
Data at rest is stored in the EU. OpenAI may keep AI requests in the USA for up to 30 days to detect abuse. Letterpier processes mail in Germany, with metadata and encrypted bodies in Neon in Frankfurt; its retention and backup periods are described in our privacy policy. Several providers are US companies subject to US law. More on transfers in our privacy policy and on the security page.
Not subprocessors
These companies receive data, but don't process it on our behalf:
- Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA. Apple delivers notifications on Mac, iPad and iPhone (APNs) and distributes the apps through TestFlight during the alpha, under its own terms (Apple Developer Program License Agreement) and as an independent controller; there's no data processing agreement. Apple receives the device token and the text of the notification (by default only the mailbox or folder and the reason; sender and subject only if you turn on previews), and the testers' data in TestFlight. According to its privacy policy, Apple bases transfers from the EU on the EU Standard Contractual Clauses.
- Your mail provider (for example OVHcloud). You have your own contract with it; Routira connects to it on your instruction.
- Your browser's push service (for example Apple, Google or Mozilla). Your browser chooses it, and the content of notifications is encrypted end to end for your browser.
- Trigger.dev, Inc. We run the job software ourselves, so Trigger.dev the company receives no data.
Changes
We announce a new or replaced subprocessor on this page at least 30 days before it starts processing data. Business customers are also notified by email to the owner of their workspace and can object under section 9 of the data processing agreement. If a subprocessor has to be replaced at short notice for security or availability, or if one of our providers makes a change at shorter notice, we inform you without undue delay.
- 27 September 2026: first version of this list.