Sub-processors
Version: October 4, 2026
KlusAI Labs SRL ("KlusAI"), Cluj-Napoca, Romania, uses the third parties below to process personal data for its customers. This list is part of the Data Processing Agreement (section 6) and of the razorBridge B2B Terms. Each entry names the company, what it does for us, where it processes data, the safeguard for any transfer outside the European Economic Area (EEA), and the services it is used for.
The services are: razorBridge Managed kOS — Shared (multi-tenant kOS, including klusai.com workspaces), razorBridge Managed kOS — Dedicated (a single-tenant environment), razorBridge AI Blades (GPU servers by the hour), razorBridge AI Gateway (AI models through one API) and the razorBridge Hub (accounts, credit and usage for AI Blades and AI Gateway).
Some entries below say "only where enabled for your workspace". These services are built into the platform but are used only when a setting or an integration turns them on. We list them so that the list is complete, even where they are not in use for you.
Hosting and infrastructure
DigitalOcean, LLC (United States)
- Service
- Hosting of the application, its database and its file storage
- Location
- Frankfurt, Germany (EU)
- Transfer safeguard
- Data is stored in the EU; the provider is headquartered in the United States. EU-U.S. Data Privacy Framework or Standard Contractual Clauses.
- Applies to
- Managed kOS — Shared; the razorBridge Hub; the klusai.com and razorbridge.eu websites
DigitalOcean, LLC (United States)
- Service
- GPU servers for AI Blades
- Location
- Toronto, Canada (outside the EU)
- Transfer safeguard
- EU-U.S. Data Privacy Framework or Standard Contractual Clauses
- Applies to
- AI Blades placed with this provider. A blade may run outside the EU unless your order form says it is EU-only.
Scaleway SAS (France)
- Service
- Hosting of Dedicated environments, including their private inference GPUs; GPU servers for AI Blades; the AI models labelled EU-only on AI Gateway
- Location
- Paris, France, and Warsaw, Poland (EU). Dedicated environments and EU-only models run in Paris.
- Transfer safeguard
- None needed: an EU company processing in the EU
- Applies to
- Managed kOS — Dedicated; AI Blades placed with this provider; AI Gateway models labelled EU-only
Cloudflare, Inc. (United States)
- Service
- Edge network in front of our websites: proxying, caching and delivery of web traffic
- Location
- Cloudflare's global network, including the EU and the United States
- Transfer safeguard
- EU-U.S. Data Privacy Framework or Standard Contractual Clauses
- Applies to
- The klusai.com and razorbridge.eu websites and the services reached through them, only where enabled for your workspace
AI models
OpenRouter, Inc. (United States)
- Service
- Routes AI requests to the model provider of the model chosen
- Location
- United States
- Transfer safeguard
- Standard Contractual Clauses
- Applies to
- AI requests on Managed kOS — Shared; AI Gateway models not labelled EU-only. Never used on Managed kOS — Dedicated.
Model providers reached through OpenRouter (for example Anthropic, OpenAI and Google)
- Service
- Run the AI model a request is sent to. The provider is the one named on the model, such as Claude (Anthropic), GPT (OpenAI) or Gemini (Google).
- Location
- Outside the EU, including the United States; it depends on the model and its provider
- Transfer safeguard
- EU-U.S. Data Privacy Framework or Standard Contractual Clauses
- Applies to
- AI requests on Managed kOS — Shared; AI Gateway models not labelled EU-only
Google Cloud (Vertex AI) (headquartered in the United States)
- Service
- Speech transcription
- Location
- The Netherlands (EU)
- Transfer safeguard
- Data is processed in the EU; the provider is headquartered in the United States. EU-U.S. Data Privacy Framework or Standard Contractual Clauses.
- Applies to
- Managed kOS — Dedicated, where speech transcription is enabled
Anthropic, PBC (United States)
- Service
- Runs Claude models when a request is sent to Anthropic directly rather than through OpenRouter
- Location
- United States
- Transfer safeguard
- EU-U.S. Data Privacy Framework or Standard Contractual Clauses
- Applies to
- AI requests on Managed kOS — Shared, only where enabled for your workspace
Cohere Inc. (Canada)
- Service
- Re-orders knowledge-base search results by relevance (reranking) when called directly rather than through OpenRouter
- Location
- Outside the EU
- Transfer safeguard
- An adequacy decision of the European Commission or Standard Contractual Clauses
- Applies to
- Knowledge-base search on Managed kOS — Shared, only where enabled for your workspace
Web search and enrichment
Web search providers: Brave Software, Inc. (Brave Search) and Serper (outside the EU)
- Service
- Live web search of the sources an office has granted to an assistant. The search query is sent, limited to the granted website.
- Location
- Outside the EU, including the United States
- Transfer safeguard
- EU-U.S. Data Privacy Framework or Standard Contractual Clauses
- Applies to
- Managed kOS — Dedicated, only where enabled for your workspace
RapidAPI (outside the EU)
- Service
- Looks up public LinkedIn profile details (LinkedIn enrichment)
- Location
- Outside the EU, including the United States
- Transfer safeguard
- EU-U.S. Data Privacy Framework or Standard Contractual Clauses
- Applies to
- Managed kOS — Shared, only where enabled for your workspace
E-mail, analytics and operations
ActiveCampaign, LLC (Postmark) (United States)
- Service
- Transactional e-mail: sign-in codes, invitations and notifications. Not the content of your work.
- Location
- United States
- Transfer safeguard
- EU-U.S. Data Privacy Framework
- Applies to
- Every service: Managed kOS — Shared and Dedicated (named as an exception in the contract), and the razorBridge Hub
Sentry (headquartered in the United States)
- Service
- Error monitoring: reports of application errors
- Location
- Germany (EU data region)
- Transfer safeguard
- Data is stored in the EU; the provider is headquartered in the United States. EU-U.S. Data Privacy Framework or Standard Contractual Clauses.
- Applies to
- Every service
Plausible Insights OÜ (Estonia)
- Service
- Website analytics: counts page views without cookies
- Location
- European Union
- Transfer safeguard
- None needed: an EU company processing in the EU
- Applies to
- The klusai.com and razorbridge.eu websites, only where enabled for your workspace
Not sub-processors
- Signing in with Microsoft, Google, GitHub or LinkedIn goes through an identity provider you or your organization chose. It is not our sub-processor.
- A Dedicated environment uses the sub-processors listed for Dedicated above, plus any others named in the customer's contract.
Changes to this list
We update this list, and its version date, before a new sub-processor starts processing personal data. Customers can object as the Data Processing Agreement (section 6) and the razorBridge B2B Terms say.
Contact
Questions about this list: [email protected].
KlusAI Labs SRL
Cluj-Napoca, Romania