Sous-traitants.

01About this list

A sub-processor is a company we engage to help deliver HotelOS that may handle personal data in the process. This page lists every one of them, what it does for us, and where it processes data. It is the list referenced by the Data Processing Agreement at /legal/dpa.

Each sub-processor is security-reviewed before onboarding and bound by a written contract with data protection obligations no less protective than our own. We stay fully responsible to you for their performance.

02Current sub-processors

03How AI model providers handle data

An AI model provider receives only the content a feature needs for the request being made, processes it to return a result, and acts only on our instructions. Each provider's terms prohibit using that content to train or fine-tune AI models, and limit retention to what the provider needs to deliver the request and keep its service secure. Transfers outside the EU are covered by standard contractual clauses.

Gmail and Google Workspace data is sent only to AI model providers whose terms also bar using it to develop or improve their models, as the Google API Services User Data Policy's Limited Use requirements demand. See our privacy policy at /legal/privacy.

04Systems you connect yourself

HotelOS integrates with property management, payment, accounting and messaging systems that you already run. Those systems are not our sub-processors — you hold the relationship and the contract, and we exchange data with them at your instruction using your credentials. QuickBooks appears above because the connection runs through our infrastructure; the same logic applies to any other integration we operate on your behalf. Messaging and email providers you connect with your own account — for example a Twilio or SendGrid account — remain your contract, and we use them only at your instruction.

05How we announce changes

Before adding or replacing a sub-processor we email account owners at least 30 days in advance and update the date at the top of this page. Within that window you may object on reasonable data protection grounds; if we cannot offer a workable alternative, you may terminate the affected service and get back the fees paid for the unused portion of your term.

To be added to the notification list, or to ask anything about a sub-processor, write to [email protected].

06Change log

Every change to this list, most recent first. HotelOS had no external customers before October 2026, so the 30-day notice period applies to changes from that point on.

27 October 2026

Added Hetzner Online GmbH (Germany) for log analytics and background-job servers. PostHog processing moved from the United States to its EU-hosted instance. Cloudflare's entry now states that uploaded files and attachments are stored in Asia-Pacific pending a move to EU storage. Supabase's entry corrected to database, authentication and backups.

22 October 2026

Named each AI model provider individually — Anthropic, OpenAI, xAI and TypeSafe AI — in place of a generic entry, and noted Cloudflare Workers AI. Added the paragraphs on how AI providers handle content.

2 August 2026

List first published with Cloudflare, Supabase, Stripe, Resend, PostHog, Google, Intuit and a generic AI model provider entry.