Cortena uses a limited set of approved sub-processors to deliver the Service. This page lists each sub-processor, their location, processing purpose, and data retention approach.
For questions or to request our full DPA/AVV, contact: compliance@cortena.ai
To provide transparency about third parties that may process customer data on Cortena's behalf, in line with GDPR requirements.
| Sub-processor | Country | Purpose | Retention |
|---|---|---|---|
| Hetzner Online GmbH | Germany 🇩🇪 | Core infrastructure — hosting and storage of all platform data on dedicated servers in a private Kubernetes cluster | Duration of contract |
| OpenAI Ireland Limited | Ireland 🇮🇪 | Large Language Model (LLM) provider for finance workflow automation, including document extraction, classification, matching, analysis, and AI-assisted execution across finance workflows | Short-term processing only — data is not retained for model training |
| AC PM LLC (Postmark) | United States 🇺🇸 | Inbound email routing — first reception and processing of financial documents submitted by email | Up to 7 days |
| Google Cloud EMEA Limited (Google Workspace) | Ireland 🇮🇪 | Storage and maintenance of AI instructions, business guidelines, and matching rules provided by the customer | Duration of contract |
| Microsoft Ireland Operations Limited | Ireland 🇮🇪 | Storage and maintenance of AI instructions, business guidelines, and matching rules provided by the customer | Duration of contract |
| Yapily Ltd | United Kingdom 🇬🇧 | PSD2-compliant open banking connectivity — bank transaction and payment operations (if enabled) | Duration of contract |
Core application data is stored and processed in Germany (Hetzner). Some sub-processors are located outside the EU/EEA:
All other sub-processors are located within the EU/EEA (Ireland or Germany).
Cortena uses OpenAI Ireland Limited as its LLM provider across finance workflow automation features, including document processing, classification, matching, reconciliation support, and AI-assisted execution.
Key commitments: