Sub-processors
Everyone outside us who can see data from Starting Up, and why that is.
This list belongs to the Data Processing Agreement and to the privacy statement. If we add or replace a party, we give at least 30 days' notice by email and you may object.
In use today
| Party | For what | Which data | Where |
|---|---|---|---|
| Nodge hosting |
Running the application, the database, and backups | Everything held in the service | TODO — confirm region and establishment |
| AhaSend |
Sending sign-in links and messages about your account | Email address and the content of that message | TODO — confirm region |
| Mollie B.V. payments |
Processing payments and subscriptions | Name, email address, amount, payment details | The Netherlands (EU) |
| Anthropic AI |
Answering an AI request — only if you use an AI feature | The content of that single request | United States |
About Mollie. For handling the payment itself Mollie is not our sub-processor but an independent controller — as a payment service provider they have their own statutory duties. What they do with it is in their own privacy statement. We never see card or bank account numbers; those do not enter our systems.
About AI. Nothing goes to an AI provider unless someone in your workspace uses an AI feature. What we keep of such a request is the token count, the model, the cost and the outcome — not the question and not the answer. You can leave AI switched off in your workspace entirely, and then this never happens.
Transfers outside the EEA
Of the parties above, Anthropic processes outside the EEA. For that we rely on the European Commission's Standard Contractual Clauses together with Anthropic's own processing terms. The transfer is limited to the content of the requests you choose to run.
Present in the product, but not in use
The following connections exist in the software but are not switched on in production today. No data goes to them. If we switch one on, it moves into the table above first and you get 30 days' notice.
- OpenAI and DeepSeek — additional AI providers, no key configured.
- Moneybird and Exact Online — accounting connections, no registration configured.
What are not sub-processors
Google and Microsoft
If you connect Google or Microsoft, that happens with a registration in your own environment and with your own client id. We deliberately hold no shared key for those two — the application refuses to read one even if it were configured by accident. You connect your own account through your own registration; we do not sit in between as a processor, and that service's terms apply between you and them.
Products in the suite
TheJay and other products that sign in through Starting Up are not third parties for the purposes of this list: they are delivered by the same party. They receive data only from a workspace you have expressly admitted them to, and the consent screen at sign-in says beforehand what they do and do not get.
Today Starting Up and TheJay are delivered by the same undertaking. If that changes — for example if a product moves into a separate company — that product becomes a sub-processor on this list, with the same 30 days' notice.
Social platforms and other services you connect
If you send something outward through a connected service, you give that instruction and it goes there directly. That service is a recipient on your instruction, not our sub-processor.