Cortexia Sub-processor List
Last updated: 23 May 2026
This page lists the sub-processors that Revontulet AS uses to provide Cortexia. It is maintained in accordance with Section 6 of the Data Processing Agreement and Section 5 of the Privacy Policy.
We will update this page at least 30 days before adding or replacing a sub-processor. Organisation customers who have subscribed to change notifications will receive an email when this page is updated.
To subscribe to change notifications, email privacy@cortexia.co with the subject line "Sub-processor notifications".
Current sub-processors
| Sub-processor | Processing activity | Country of processing | Transfer mechanism |
|---|---|---|---|
| Hetzner Online GmbH | Infrastructure hosting (application servers, database backups, file storage) | Germany / Finland (EEA) | N/A (EEA) |
| Neo4j, Inc. (Neo4j Aura) | Managed graph database hosting and query processing | EEA (Belgium) | N/A (EEA) |
| Resend, Inc. | Transactional email delivery (account notifications, password resets, invitations) | United States | EU-US Data Privacy Framework |
| Cloudflare, Inc. | CAPTCHA verification for public intake forms (Turnstile) | Global (edge network, EEA-preferred routing) | EU-US Data Privacy Framework; SCCs where DPF does not apply |
| Hugging Face, Inc. | Machine-learning model inference for workflow AI/ML features (only when a user explicitly invokes an ML workflow node) | United States / EEA (depending on model host) | EU-US Data Privacy Framework; SCCs where DPF does not apply |
Revontulet AS personnel
Revontulet AS employees and contractors who access Customer Data in the course of providing support, engineering, and operations are located in Norway (EEA).
Previous changes
No previous changes. This is the initial sub-processor list (V0.1).