Sub-processors
To run ELEVATE we rely on a small number of third parties. Where they process personal data on behalf of our customers they act as sub-processors, and we remain fully responsible to the customer for what they do. All of them are established in the EU.
This page is the current list. It mirrors Annex 1 of our Data Processing Agreement, and we keep the two in step.
Inleed AB
- What they do: server hosting and infrastructure.
- Data involved: all data held in a customer’s environment, including account data, usage data and content.
- Where: Sweden.
Mistral AI SAS
- What they do: language-model inference — the automated analysis applied to source material and customer content.
- Data involved: the text submitted for analysis, including any personal data it contains. Account data and usage logs are not sent to this provider.
- Where: France.
Berget AI AB
- What they do: language-model inference — the automated analysis applied to source material and customer content.
- Data involved: the text submitted for analysis, including any personal data it contains. Account data and usage logs are not sent to this provider.
- Where: Sweden. Processing takes place in data centres within the EEA.
Scaleway SAS
- What they do: delivery of transactional email, such as sign-in and notification messages.
- Data involved: recipient name and email address only.
- Where: France.
What we do not do
- We do not transfer personal data outside the EU/EEA.
- We do not use customer data, or customer content, to train or fine-tune any model. Mistral AI’s terms prohibit the same.
- We do not buy personal data from data brokers, and we do not ingest private or leaked material.
- We do not sell personal data.
How we handle changes
Before we add or replace a sub-processor we give customers at least 30 days’ written notice, sent to the organisation’s registered contact. A customer may object on reasonable data protection grounds within 20 days. If we cannot resolve the objection, the customer may terminate without penalty and receive a pro-rata refund for the unused period.
Changes are also recorded below, so the history of this page is visible rather than silently overwritten.
Change history
- 10 August 2026 — list first published. No change to the sub-processors in use.
- 21 August 2026 — Berget AI added as a second language-model inference provider.
The Data Processing Agreement
Our DPA sets out how we handle personal data on a customer’s behalf, including the security measures we apply and the obligations we carry. Customers receive it as a schedule to their agreement. If you are evaluating ELEVATE and would like to review it first, email privacy@elevate-platform.eu.
Contact
Questions about this page or about how we process data: privacy@elevate-platform.eu. See also our trust & security page and privacy notice.