AEOlift

Subprocessors

Last updated: 28 May 2026

This page lists the third-party subprocessors Tedy Development s.r.o. uses to deliver AEOlift (the “Service”). It is referenced from Section 8 of our Privacy Policy.

We update this page whenever the production stack changes. If you require advance notice of new or replacement subprocessors as part of a Data Processing Agreement, contact us at info@tedydev.com.

Each provider processes data on our instructions and under its own terms, security controls, and Data Processing Agreement (linked below). Where data is transferred outside the European Economic Area, we rely on the safeguards described in Section 9 of the Privacy Policy (Standard Contractual Clauses, adequacy decisions, or other legally recognised transfer mechanisms).

Hosting and infrastructure

Subprocessor Purpose Data processed Location DPA
Cloudflare, Inc. Marketing website and dashboard hosting (Cloudflare Pages); CDN; DNS IP address, request metadata, basic logs Global edge; US-headquartered View
Hetzner Online GmbH Virtual private server hosting the API and scheduler All Customer Data at rest and in transit during processing Germany / Finland (EEA) View
Supabase, Inc. Authentication (magic-link sign-in, JWT issuance + JWKS) Email address, user identifiers, session tokens EU region (provider-managed); US-headquartered View

AI model and search providers

Subprocessor Purpose Data processed Location DPA
Anthropic, PBC LLM queries (Claude) for prompt generation, response analysis, and visibility audits Prompts derived from brand, domain, competitors, and keywords; analysed LLM outputs United States View
OpenAI, L.L.C. LLM queries (GPT-4o) for cross-model visibility coverage Same as Anthropic United States View
Google LLC (Google AI Studio / Gemini API) LLM queries with google_search grounding (proxy for Google AI Mode) Same as Anthropic United States View
Perplexity AI, Inc. LLM queries (Sonar) for citation-grounded visibility coverage Same as Anthropic United States View
SerpApi, LLC Retrieves Google AI Overviews blocks for visibility scoring Search queries derived from brand and keywords United States View
Brave Software, Inc. Brave Search API for ranking signals Search queries derived from brand and keywords United States View

Notifications

Subprocessor Purpose Data processed Location DPA
Resend (Resend, Inc.) Transactional email delivery for audit notifications and account messages Recipient email address, message subject and body, delivery metadata United States; EU region available View
Telegram Messenger Inc. Telegram Bot API for opt-in customer notifications Telegram chat ID, Telegram username (if available), message body, delivery metadata Provider-managed (global) View

Categories not currently used

The following provider categories are referenced in our Privacy Policy but are not in use as of the effective date. If we introduce a provider in any of these categories, this page will be updated:

Changes to this list

We reserve the right to add, replace, or remove subprocessors as the Service evolves. Material changes will be reflected on this page and, where you have a Data Processing Agreement with us that requires it, notified to you in advance using the mechanism agreed in that DPA.