LegalSign in to the platform →Navica AI Subprocessor List
Updated: 11 September 2026
This list identifies core providers Navica uses to process Personal Data when delivering the Platform and Services. A provider applies only where the corresponding service is enabled or selected for the Customer.
Core and conditional providers
| Provider | Purpose | Principal location / transfer approach |
|---|---|---|
| Hetzner Online GmbH | EEA cloud hosting, compute, databases, storage and network infrastructure. | European Union. Core production Customer Data is hosted in the EEA. |
| OpenAI | AI inference and embeddings where an OpenAI capability is enabled or selected. | EEA and/or United States. EU adequacy decision for the EU–U.S. Data Privacy Framework where the relevant recipient is actively certified; otherwise 2021 SCCs and supplementary measures as required. |
| Anthropic | Optional AI inference where an Anthropic capability is enabled or selected. | EEA and/or United States. Applicable adequacy mechanism where available; otherwise 2021 SCCs and supplementary measures as required. |
| Zoho | Transactional email and, where enabled, identity services. | EEA and other documented service locations. Adequacy decision or 2021 SCCs as applicable. |
| Stripe | Subscription billing, payment administration and fraud prevention where paid billing is enabled. | EEA and/or United States. Applicable adequacy mechanism where available; otherwise 2021 SCCs and supplementary measures as required. |
| AlphaAI Technologies Inc. (Tavily) | Web search and retrieval to support AI responses where web search is enabled. Search queries and associated request data are sent to the service. | United States. Contact privacy@navica.ai for the applicable international transfer safeguards. |
Customer-selected third-party services
A Customer may direct the Platform to connect to external models, data sources, APIs or other services using Customer credentials. Those customer-selected services are governed by their own terms and are not treated as a Navica Subprocessor unless Navica engages the provider to process Personal Data on Navica’s behalf.
Changes and objections
Navica will keep this list current and provide notice of an intended material addition or replacement where required by the DPA or Data Protection Law. A Customer may object on reasonable data-protection grounds within the notice period specified by Navica. Contact privacy@navica.ai for notices, transfer safeguards or questions.