Solvgent (itligt) engages the third-party processors listed below to deliver the service. We chose each one for a specific data-handling reason — region, contractual posture, scope of access — and each is bound by a Data Processing Agreement plus the EU Standard Contractual Clauses or the EU–US Data Privacy Framework. Customer-facing data stays in the EU wherever practical. When the list changes, this page updates within 30 days; customers on Agency Pro and above receive direct notice.
Edge delivery, DDoS protection, and DNS — no customer-data inspection beyond standard request logging, and Workers traffic terminates close to the EU user.
Managed Postgres with EU data residency, branching for safe migration testing, and point-in-time recovery for restore drills.
EU-controlled physical hosting in Germany — chosen specifically because no customer data is transferred to non-EU jurisdictions in normal operation.
Primary AI inference for Brand Brain learning, operating under enterprise terms that prohibit training foundation models on Solvgent customer prompts or generated content.
Subscription billing, invoicing, and tax handling — payment card data never touches Solvgent infrastructure; tokenization is enforced at the form layer.
Transactional email (verification, notifications, billing) — DKIM, SPF, and DMARC enforced; no marketing email is dispatched without explicit opt-in.
Application error and exception monitoring — PII scrubbing is applied at the SDK layer; only stack traces and request identifiers reach the upstream service.
Used as a fallback model and for specialized completion tasks. Operating under enterprise terms that prohibit training foundation models on Solvgent customer prompts or generated content.
Aggregate product-usage analytics on the EU-hosted PostHog Cloud instance in Frankfurt. Cookieless mode; no PII forwarded.
Notification of changes: Solvgent publishes proposed additions to the sub-processor list on this page at least 14 days before they take effect. Customers on the Business, Agency Pro, and Enterprise plans may object in writing to privacy [at] solvgent [dot] com within that window, in which case Solvgent will either offer a workable alternative or grant the customer a pro-rated exit.
Scope of processing: Each sub-processor is engaged only for the purpose listed above and acts on documented instructions from Solvgent. Upstream AI providers are bound by their enterprise terms not to train foundation models on customer prompts or generated content.
Questions: For a full Data Processing Agreement, SCCs, or any sub-processor question, contact privacy [at] solvgent [dot] com .
Compliance officers and IT reviewers can subscribe via email. We send a single message per change, no marketing.
