List of sub-processors

This is the agreed list of sub-processors referred to in Clause 7.7(a) of the Data Processing Agreement. Transfers outside the European Economic Area take place on the bases set out in Annex IV of that agreement. Last updated: 25-10-2026.

Changes are announced under "Planned changes" below at least 30 (thirty) days before they take effect, and in the RSS feed. Objections may be sent to support within that period.

Planned changes

No changes are currently planned.

Current sub-processors

1. Amazon Web Services EMEA SARL

Processing: hosting, storage and delivery of the service, including e-mail delivery and disaster recovery.
Location: Ireland; United States (disaster recovery and a copy of publicly accessible files only).

2. Google Cloud EMEA Limited

Processing: backup storage.
Location: European Union; United States (a copy of publicly accessible files only).

3. Hetzner Online GmbH

Processing: backup storage.
Location: Germany.

4. OpenAI Ireland Limited

Processing: optional artificial intelligence features of the service, including automatic translation. Personal data is sent only when such a feature is used and, under the sub-processor's terms, is not used to train models. For multi-step conversations, the sub-processor retains request and response data until Mozello requests its deletion: when the conversation, website or account is deleted, on termination, and at the latest 30 days after the conversation's last activity. Any other retention, such as abuse-monitoring logs, is governed by the sub-processor's own terms.
Location: United States.

5. Cloudflare, Inc.

Processing: website security features.
Location: global, including the European Union and United States.

6. EID Easy OÜ

Processing: optional age verification for online shop visitors. Personal data is processed only when the controller enables age verification.
Location: European Union.