Legal
Sub-processors
Version:
Translation — the German version is binding. German version →
These providers process personal data on behalf of HS-Soft AG so that RunMyHub works. The basis is the Data Processing Agreement; we announce changes at least 30 days in advance.
Operations and infrastructure
| Provider | Purpose | Data location | Safeguards |
|---|---|---|---|
| Amazon Web Services EMEA SARL (Luxembourg) | Hosting, storage, session recording, email delivery (SES), sign-in (Cognito), AI models via Amazon Bedrock | Zurich (customers in Switzerland), Frankfurt (customers in the EU) | DPA, standard contractual clauses |
| MongoDB, Inc. (Atlas) | Database | On AWS in Zurich or Frankfurt | DPA, standard contractual clauses |
Payments and communication
| Provider | Purpose | Data location | Safeguards |
|---|---|---|---|
| Stripe Payments Europe, Ltd. (Ireland) | Card payments, billing | EU; USA | DPA, Data Privacy Framework, standard contractual clauses |
| Meta Platforms Ireland Ltd. | WhatsApp channel for support and the AI assistant, if used | EU; USA | DPA, Data Privacy Framework |
| Microsoft Ireland Operations Ltd. | Microsoft Teams channel, if used | EU; USA | DPA, Data Privacy Framework |
Artificial intelligence
| Provider | Purpose | Data location | Safeguards |
|---|---|---|---|
| Anthropic, PBC | AI assistant, translations, analyses | USA | DPA, standard contractual clauses with Swiss addendum; no training on customer data |
| OpenAI, L.L.C. | Speech recognition, image processing, embeddings | USA | DPA, standard contractual clauses; no training on customer data |
Devices and other services
| Provider | Purpose | Data location | Safeguards |
|---|---|---|---|
| Google Ireland Ltd. | Google sign-in, Google Wallet, Google Business Profile, if used | EU; USA | DPA, Data Privacy Framework |
| Apple Distribution International Ltd. | Push notifications, Apple Wallet, if used | EU; USA | Data Privacy Framework |
| Sunmi Technology / Esper | Managing till and station devices | [open: location] | [open] |
Integrations you switch on yourself
If a customer connects RunMyHub to its own account with another provider (e.g. bexio, its bank or its fiscalisation service), data is transferred to that provider on the customer’s instruction. That provider is then not a sub-processor of HS-Soft AG; the customer’s own contract with it applies.
[Open: check the contracting party, location and safeguards of every entry against the actual contracts.]