DRAFTDraft, under review by our lawyer. The reviewed version will be part of your agreement.
Sub-processors
Last changed 03.11.2026. A draft: the reviewed text will be part of your agreement.
The providers that process data for AeroViktros, what for, which data, where, and on what basis it leaves the EU / EEA where it does. Before we add or replace one, we tell every organisation that uses AeroViktros (the DPA), so it can object.
| Provider | Purpose | Data | Region | Transfer basis |
|---|---|---|---|---|
| Railway (Railway Corporation) | Runs the application and its PostgreSQL database | Everything the companies record in AeroViktros, the accounts, the logs | [owner/lawyer: the Railway region of the service and of the database] | Primary processing in the United States, as Railway's DPA states; [owner/lawyer: lawyer: the transfer basis, e.g. SCCs, and a transfer impact assessment] |
| [owner/lawyer: the e-mail provider in SMTP_HOST] | Sends the e-mails of the app (password reset, notices, export links) | The recipient's e-mail address and the message | [owner/lawyer: its region] | [owner/lawyer: lawyer: the transfer basis] |
| [owner/lawyer: backup storage provider] | Keeps the database backups | A copy of the database | [owner/lawyer: provider and region] | [owner/lawyer: lawyer: the transfer basis] |
| OpenAI (OpenAI, L.L.C. / OpenAI Ireland Ltd.) | Damage report drafts, Ask the Manual answers and search, the assistant, the NDT check | The text and pictures the person sends to the AI feature (no passwords); never the company's whole database | [owner/lawyer: the OpenAI processing region] | [owner/lawyer: lawyer: the transfer basis and the OpenAI DPA] |
| Anthropic (Anthropic, PBC) | Document-control review of past job cards | The pages of the job card under review | [owner/lawyer: the Anthropic processing region] | [owner/lawyer: lawyer: the transfer basis and the Anthropic DPA] |
| [owner/lawyer: who hosts the Python AI service (AI_SERVICE_URL)] | The AI service that splits repair text into steps and reads handwriting (AI_SERVICE_URL); the model provider it calls, if any: [owner/lawyer: the provider] | The text and page images sent for that step | [owner/lawyer: where the Python AI service runs; started on the same server as the app when AI_SERVICE_URL is localhost] | [owner/lawyer: lawyer: the transfer basis, if it runs elsewhere] |
Last changed 03.11.2026. The AI providers receive only what a person sends to an AI feature; a company without the AI module sends nothing to them.