Who processes your data
Last updated: 21 June 2026
To run Klartext we rely on a small number of service providers (“subprocessors”) who process personal data on our behalf, each under a data-processing agreement. We keep this list short on purpose, and we update it when it changes.
| Provider | Purpose | Location | Safeguard |
|---|---|---|---|
| Anthropic | Reads and interprets the letters you scan (AI vision model). Does not train on your data; deletes inputs/outputs within ~30 days. | USA | Standard Contractual Clauses (SCCs) |
| Email provider | Sends transactional email (verification, password reset, deadline reminders, digests). | EU | EU hosting; data-processing agreement |
| Hosting provider | Runs our servers, database, and file storage (your account, scans, deadlines). | EU (Germany) | EU hosting; data-processing agreement |
| Apple / Google (push) | Delivers push reminders to the mobile app — only if you install the app and turn notifications on. The notification is content-free (“a deadline is coming up”); it never contains your letter’s contents. | USA | Standard Contractual Clauses; content-free payloads |
Anthropic is the only processor outside the EU that sees letter content. Apple/Google receive only a content-free reminder, and only if you enable mobile notifications. See what leaves our servers for exactly what is sent and why, and our privacy policy for the formal detail.
The specific email and hosting providers are confirmed before public launch; this page names the role each plays and is kept current.