Skip to content
ProoV

Sub-processors

Last updated: 11 November 2026

These providers process personal data for ProoV UG (haftungsbeschränkt). Microsoft’s data protection terms cover every Microsoft row, and the safeguard of each other provider says where its agreement stands. How we use personal data is in our privacy policy, and how we protect it is on our security page.

Running the platform

These providers process personal data whenever people use ProoV: learners, company reviewers and university staff. They also process the data ProoV handles for a company or university customer under a data processing agreement.

  • Microsoft Azure

    Container Apps, Database for PostgreSQL, Cache for Redis, Key Vault, Log Analytics

    Purpose
    Runs the API and stores the database, sign-in sessions, secrets and server logs
    Personal data
    All data on the platform
    Location
    North Europe (Ireland)
    Safeguard
    Microsoft Products and Services Data Protection Addendum

  • Microsoft Azure

    Blob Storage, Static Web Apps

    Purpose
    Stores uploaded files, reports and certificates, and serves the websites
    Personal data
    Files people upload; page requests
    Location
    West Europe (Netherlands), with a geo-redundant copy in North Europe (Ireland); static website files from Microsoft’s global network
    Safeguard
    Microsoft Products and Services Data Protection Addendum

  • Microsoft Azure

    Communication Services

    Purpose
    Sends the platform’s email
    Personal data
    Name, email address, message, delivery status
    Location
    Europe (the service’s data location)
    Safeguard
    Microsoft Products and Services Data Protection Addendum

  • Microsoft Azure

    Azure OpenAI

    Purpose
    Grades submissions and runs the AI coach and the other AI features
    Personal data
    The work or text sent to the feature. A grading request carries no name or email address
    Location
    Resource in Sweden Central. Most models run as Global deployments, which may process a request in any Azure region; the move to EU Data Zone deployments is under way
    Safeguard
    Microsoft Products and Services Data Protection Addendum; standard contractual clauses

  • Microsoft Azure

    Application Insights

    Purpose
    Error and performance monitoring of the API and availability checks of the websites
    Personal data
    Request URLs, error details and performance data from the API
    Location
    Stored in North Europe (Ireland); the monitoring resource is registered in East US
    Safeguard
    Microsoft Products and Services Data Protection Addendum; standard contractual clauses

  • Cloudflare

    DNS, content delivery, attack protection, Turnstile

    Purpose
    Passes every request to ProoV, blocks attacks, and checks that a form comes from a person
    Personal data
    IP address and request details
    Location
    Cloudflare’s global network
    Safeguard
    The provider’s data processing terms, which we are filing; standard contractual clauses, and the EU-US Data Privacy Framework where the provider is certified

  • GitHub

    Repository access

    Purpose
    Reads a code repository when a learner links it to a project
    Personal data
    The repository’s contents
    Location
    United States
    Safeguard
    The provider’s data processing terms, which we are filing; standard contractual clauses, and the EU-US Data Privacy Framework where the provider is certified

Statistics run only after a visitor chooses “Accept all cookies”.

  • Google

    Google Analytics 4

    Purpose
    Counts how the public website is used, with its advertising features off
    Personal data
    Pseudonymous identifiers, pages visited, device and browser details
    Location
    Google’s data centres, including the United States
    Safeguard
    The provider’s data processing terms, which we are filing; standard contractual clauses, and the EU-US Data Privacy Framework where the provider is certified

Our team’s tools

ProoV’s team uses these for email, chat, operations alerts, engineering, support and sales. Each sees only the data a piece of work needs, such as a support message or a business contact.

  • Microsoft 365

    Exchange Online, Teams

    Purpose
    Team email, calendar and meetings
    Personal data
    Business contacts and the messages people send us
    Location
    Germany; from 13 December 2026 Microsoft may store it anywhere within the EU Data Boundary
    Safeguard
    Microsoft Products and Services Data Protection Addendum

  • Microsoft Azure

    AI Speech, Azure OpenAI (EU Data Zone)

    Purpose
    Transcribes and summarises ProoV’s own sales calls, with the other side’s agreement
    Personal data
    Call audio and transcripts
    Location
    Sweden Central; summaries on an EU Data Zone deployment
    Safeguard
    Microsoft Products and Services Data Protection Addendum

  • Slack

    Team chat

    Purpose
    Team chat and the platform’s operations alerts
    Personal data
    Alert details such as company names and ticket subjects; business contacts
    Location
    United States
    Safeguard
    The provider’s data processing terms, which we are filing; standard contractual clauses, and the EU-US Data Privacy Framework where the provider is certified

  • Anthropic

    Claude

    Purpose
    AI assistant for engineering, operations, support and sales work
    Personal data
    The data a task needs, such as a support message, a business contact or a database query result
    Location
    United States
    Safeguard
    The provider’s data processing terms, which we are filing; standard contractual clauses, and the EU-US Data Privacy Framework where the provider is certified

  • OpenAI

    Codex

    Purpose
    AI assistant for engineering work and sales drafts
    Personal data
    The data a task needs, such as a business contact
    Location
    United States
    Safeguard
    The provider’s data processing terms, which we are filing; standard contractual clauses, and the EU-US Data Privacy Framework where the provider is certified

  • Apollo

    Apollo.io

    Purpose
    Business-contact database and sales outreach
    Personal data
    Names, roles and work email addresses of business contacts
    Location
    United States
    Safeguard
    The provider’s data processing terms, which we are filing; standard contractual clauses, and the EU-US Data Privacy Framework where the provider is certified

Changes and notice

We give at least 30 days’ notice before a new sub-processor starts processing personal data for a company or university customer, and before we replace one. We publish each change here with its date and email every customer who has asked to hear about changes.

To be told, email [email protected] with the subject “Sub-processor notices”. A customer who objects on data-protection grounds during the notice period can tell us, and we look for a solution together. The customer’s data processing agreement sets what happens if we find none.

Change log

  • 11 November 2026First published list.