Deployed OS Sub-processors
Version 1.0 · Effective from 15 October 2026 · Current version · Version history
Fingerprint: f078d59a2fe5
What changed in this version
- First published version.
These are the sub-processors that Popoli AB, operating as Deployed AI ("Deployed"), uses to deliver Deployed OS, where personal data is stored, and the access from outside the EU/EEA that customers approve under the Deployed OS Data Processing Agreement.
Deployed notifies customers by email at least fourteen (14) days before adding or replacing a sub-processor, and publishes a new version of this page. Earlier versions remain available in the version history.
The Customer's own providers, such as its AI Tools, the systems it connects through Connectors and AI model services called with its own API key, are not sub-processors of Deployed and are not listed here.
Sub-processors#
| Sub-processor | Purpose | Personal data | Location | Transfer basis |
|---|---|---|---|---|
| Google Cloud EMEA Limited (Google Cloud Platform), Dublin, Ireland | Hosting, database, backups and monitoring of Deployed OS. Each customer has its own isolated Instance. | All types listed in Annex 1 of the DPA | Stockholm, Sweden (region europe-north2) | Not applicable (EU) |
| Cloudflare, Inc., San Francisco, United States | DNS, encrypted connections (TLS), network routing and protection against attacks for all traffic to and from the Service | Data in transit to and from the Service, including IP addresses, session tokens and request content. Not stored by Deployed. | Cloudflare's global network | EU-US Data Privacy Framework and EU standard contractual clauses |
| Google Cloud EMEA Limited (Google Workspace), Dublin, Ireland | Sending invitations, email verification and password reset emails | Recipient email address and a one-time link | Google's global infrastructure | EU-US Data Privacy Framework and EU standard contractual clauses |
| Google LLC, Mountain View, United States | "Continue with Google" sign-in, only for Users who choose it | Email address, name and Google account identifier | United States | EU-US Data Privacy Framework and EU standard contractual clauses |
| Microsoft Corporation, Redmond, United States | "Sign in with Microsoft" (Microsoft Entra ID), only for Users who choose it | Email address, name and Microsoft account and directory identifiers | United States | EU-US Data Privacy Framework and EU standard contractual clauses |
Approved access from outside the EU/EEA#
| Who | Purpose | Basis |
|---|---|---|
| One named member of Deployed's own engineering staff, located in the United States | Development, operations and support | Access under Deployed's control, by its own personnel, bound by confidentiality and the security measures in Annex 2 of the DPA. Personal data is not disclosed to any other company. |
No other access from outside the EU/EEA takes place without the Customer's written approval.