{
  "$schema": "https://dynexo.de/schemas/sub-processors.v1.json",
  "version": "1.0",
  "lastUpdated": "2026-05-27",
  "controller": {
    "company": "dynexo GmbH",
    "address": "Willy-Brandt-Platz 19, 38102 Braunschweig, Deutschland",
    "email": "hallo@dynexo.de"
  },
  "notes": "Öffentliche Übersicht. Vollständige Details inkl. Vertrags-Status, Audit-Scope und Risk-Scoring auf Anfrage unter NDA. Änderungen werden aktiven Mandanten 14 Tage vor Inkrafttreten schriftlich notifiziert.",
  "license": "CC-BY-4.0",
  "subProcessors": [
    {
      "name": "Hetzner Online GmbH",
      "category": "infrastructure",
      "function": "Hosting · primärer Infrastruktur-Provider",
      "country": "DE",
      "region": "EU",
      "dataAccess": "operational",
      "personalData": false,
      "contractStatus": "active",
      "sccApplicable": false
    },
    {
      "name": "IONOS SE",
      "category": "infrastructure",
      "function": "Hosting · alternative Region für Mandanten",
      "country": "DE",
      "region": "EU",
      "dataAccess": "operational",
      "personalData": false,
      "contractStatus": "active",
      "sccApplicable": false
    },
    {
      "name": "OVHcloud",
      "category": "infrastructure",
      "function": "Hosting · EU-Alternative",
      "country": "FR",
      "region": "EU",
      "dataAccess": "operational",
      "personalData": false,
      "contractStatus": "active",
      "sccApplicable": false
    },
    {
      "name": "Cloudflare, Inc.",
      "category": "infrastructure",
      "function": "CDN, DDoS-Schutz · EU-only-Zone für dynexo.de",
      "country": "US",
      "region": "Global",
      "dataAccess": "transit",
      "personalData": false,
      "contractStatus": "active",
      "sccApplicable": true,
      "notes": "EU-only-Zone konfiguriert. Kein Speichern von Mandanten-Daten."
    },
    {
      "name": "Anthropic, PBC",
      "category": "model-provider",
      "function": "LLM-Provider · nur bei BYO-Key Mandanten ohne dynexo-Sub-Processor-Beziehung",
      "country": "US",
      "region": "US",
      "dataAccess": "byo-key-only",
      "personalData": false,
      "contractStatus": "byo-key-only",
      "sccApplicable": "byo-key-only",
      "notes": "Bei BYO-Key liegt die Datenübergabe in Mandanten-Verantwortung. dynexo agiert nicht als Sub-Processor."
    },
    {
      "name": "OpenAI, L.L.C.",
      "category": "model-provider",
      "function": "LLM-Provider · nur bei BYO-Key Mandanten ohne dynexo-Sub-Processor-Beziehung",
      "country": "US",
      "region": "US",
      "dataAccess": "byo-key-only",
      "personalData": false,
      "contractStatus": "byo-key-only",
      "sccApplicable": "byo-key-only"
    },
    {
      "name": "Mistral AI SAS",
      "category": "model-provider",
      "function": "LLM-Provider · EU-Hosting verfügbar",
      "country": "FR",
      "region": "EU",
      "dataAccess": "byo-key-only",
      "personalData": false,
      "contractStatus": "byo-key-only",
      "sccApplicable": false
    }
  ]
}