{
  "updated": "2026-05-25",
  "policy": {
    "notification_days_before_change": 30,
    "legal_basis": "GDPR Art. 28(2) and Art. 28(4)",
    "contact": "legal@abnplatform.com",
    "register_html": "https://www.abnplatform.com/subprocessors",
    "dpa_html": "https://www.abnplatform.com/legal/dpa",
    "dpa_pdf":  "https://www.abnplatform.com/legal/dpa.pdf"
  },
  "subprocessors": [
    {
      "name":   "Anthropic",
      "role":   "LLM inference (abstracted data only)",
      "region": "USA",
      "dpa":    true,
      "sccs":   true
    },
    {
      "name":   "Clerk",
      "role":   "Authentication & MFA",
      "region": "USA",
      "dpa":    true,
      "sccs":   true
    },
    {
      "name":   "Nango",
      "role":   "OAuth proxy to customer systems",
      "region": "EU",
      "dpa":    true,
      "sccs":   false,
      "note":   "Self-hosted on ABN-managed EU infrastructure (Hetzner, Germany). Nango Inc.'s US infrastructure is not used."
    },
    {
      "name":   "Hetzner",
      "role":   "Server infrastructure",
      "region": "EU (Germany)",
      "dpa":    true,
      "sccs":   false
    },
    {
      "name":   "Vercel",
      "role":   "Landing hosting",
      "region": "USA",
      "dpa":    true,
      "sccs":   true
    },
    {
      "name":   "Proton",
      "role":   "Email",
      "region": "Switzerland (EU adequacy decision)",
      "dpa":    true,
      "sccs":   false
    },
    {
      "name":   "Stripe",
      "role":   "Payments",
      "region": "USA",
      "dpa":    true,
      "sccs":   true
    }
  ]
}