TolaData GmbH engages the following sub-processors to process customer personal data in the TolaData Software, as set out in Annex II of our Data Processing Agreement.
Last updated: October 2026
| Sub-processor | Purpose | Location of processing | Transfer safeguards | Applies to |
|---|---|---|---|---|
| Amazon Web Services EMEA SARL 38 Avenue John F. Kennedy, L-1855 Luxembourg | Hosting of the TolaData Software, including databases, storage and backups | AWS Europe (Frankfurt) Region (eu-central-1), Germany | Art. 28 GDPR data processing addendum incorporating EU Standard Contractual Clauses | All customers |
| OpenAI Ireland Limited / OpenAI, L.L.C. 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland | Large language model for the optional AI features (Knowledge Database, Data Analytics Assistant, Report Generation) | United States | Art. 28 GDPR data processing addendum incorporating EU Standard Contractual Clauses. Data retained for up to 30 days solely for abuse monitoring, then deleted; not used to train or improve any model. | Only customers who have requested activation of the AI features |
Changes to sub-processors
Under Clause 7.7 of the DPA, TolaData informs customers in writing of any intended addition or replacement of sub-processors at least one month in advance, giving customers the opportunity to object.
For other third-party services used on our website and in our communications, see our Data Privacy Policy.
Related: Terms of Use · Data Privacy Policy · Data Processing Agreement · Technical and Organisational Measures · Sub-processors · All terms and policies
