Sub-processors
Last updated: July 2026
This page lists the sub-processors engaged by Winkler Technologies GmbH to deliver the myHERALD platform. It forms Annex 3 of our Data Processing Agreement.
myHERALD notifies Customers of any addition or replacement of a sub-processor with at least fourteen (14) days' notice via email or in-product notification.
Infrastructure sub-processors
| Sub-processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Supabase Inc. | Database, authentication, file storage, vector search | EU (Frankfurt) | EEA, no transfer |
| Railway Corp. | Application hosting (Next.js dashboard) | EU (Amsterdam) hosting region; US-based provider | SCCs + DPF (US support/admin access) |
| Anthropic PBC | AI model (Claude) for content generation and orchestration | USA | SCCs (Module 3) + DPA |
| Google LLC | AI model (Gemini) for image generation and URL fetching | USA | DPF + SCCs + DPA |
| Voyage AI (MongoDB, Inc.) | Embedding generation for knowledge base | USA | SCCs + DPA |
| OpenAI Inc. | AI model (OpenAI) for voice input transcription, image generation, and text/content generation | USA | SCCs + DPA |
| Brave Software, Inc. | Web search API for AI agent research tasks | USA | SCCs + DPA |
| Stripe Inc. | Payment processing for subscriptions | USA | DPF + SCCs + DPA |
| Loops.so (Astrodon Corp.) | Marketing email delivery and unsubscribe management | USA | SCCs + DPA |
| Resend (Plus Five Five Inc.) | Transactional email delivery | USA | DPF + SCCs + DPA |
| PostHog Inc. | Product analytics | EU (Frankfurt) | EEA, no transfer |
| GitHub, Inc. | Bug and feature report intake (issue tracking) | USA | DPF + SCCs + DPA |
| Google LLC (Google Analytics 4) | Website analytics and traffic measurement | USA | DPF + SCCs |
| Exa Labs, Inc. | Web and PDF content retrieval for agent research | USA | SCCs + DPA |
Independent controllers (not sub-processors)
The following third parties act as independent controllers when you connect your own accounts via OAuth. They are not sub-processors of myHERALD and are governed by their own terms and privacy policies:
- LinkedIn / Microsoft. Publishing of approved content.
- Other social media platforms. Publishing of approved content (added as integrations become available: X, Instagram, Facebook, TikTok, Reddit, and others).
- Slack. Delivering notifications and messages to your connected workspace.
For details on how myHERALD handles these integrations, see our Privacy Policy.
Questions
For questions about this list or to object to a specific sub-processor, contact [email protected].