Subprocessors
This is a template for information and does not constitute legal advice. Have it reviewed and completed by a lawyer and fill in the exact company details (entity, address, VAT) before publishing. Under Belgian and EU law, liability cannot be fully excluded.
To provide HeyOtto we rely on a limited number of carefully chosen subprocessors. They process personal data solely on our behalf and under a data processing agreement, in accordance with the GDPR. Below is the current list; it forms part of our data processing agreement.
HeyOtto never sends email itself and only requests read and draft permissions on your mailbox. Mailbox content is used solely to provide the service, not to train AI models.
Current subprocessors
| Sub-processor | Purpose | Location / safeguards |
|---|---|---|
| Microsoft | Microsoft 365 / Outlook connection (reading the mailbox, preparing drafts, tasks) | EU data centres; US with standard contractual clauses |
| Gmail / Google Workspace connection (reading the mailbox, preparing drafts) | EU/US with standard contractual clauses | |
| AI provider (e.g. Anthropic) | Categorising and generating draft replies. On the Connect plan you use your own key and provider. | EU/US with appropriate safeguards; no training on your data |
| Hosting provider | Hosting of the application and the database | European Union |
| Odoo | Billing and customer portal via Digital Genics | European Union |
| Email provider | Sending transactional email (verification, notifications) | EU with appropriate safeguards |
Changes
We keep this list up to date. When a subprocessor is added or changed we update this page; existing customers are notified in advance where required. Read more about how we handle your data in our privacy statement.
Questions about this text or your data? Email privacy@heyotto.eu. HeyOtto is a product of Digital Genics.