Subprocessors
Euryan engages the third parties below to help deliver the FMEA and 8D co-authoring platform. This page forms part of our Data Processing Addendum and is the list referred to in clause 5.1 of that document.
We give at least 30 days notice before adding or replacing any subprocessor, by updating this page and notifying everyone subscribed below. Customers may object on reasonable data-protection grounds within 15 days, under clause 5.3 of the DPA.
Get notified of changes
We use this address only to send subprocessor change notices. No marketing. See our Privacy Policy.
All primary processing takes place in Frankfurt, Germany (AWS eu-central-1).
Infrastructure and AI inference
- Entity
- Amazon Web Services EMEA SARL, Luxembourg.
- Purpose
- Application compute, object storage, backups, networking, key management, authentication (Cognito), and logging and monitoring (CloudWatch).
- Data processed
- All categories described in Schedule 1 of the DPA.
- Safeguards
- ISO/IEC 27001, 27017 and 27018, SOC 2 Type II. AWS Data Processing Addendum. Processing within the EU; no transfer safeguard required.
- Entity
- Amazon Web Services EMEA SARL
- Purpose
- Generative AI inference for co-authoring, extraction and drafting.
- Data processed
- Prompt content, which may include attribution data.
- Safeguards
- Inference runs within our own AWS region. Bedrock does not retain prompts or completions, and model providers have no access to them. No transfer outside the EU.
Database
- Entity
- Neo4j Sweden AB (European contracting entity).
- Purpose
- Managed graph database hosting (AuraDB Professional).
- Data processed
- Engineering records and attribution data.
- Safeguards
- ISO/IEC 27001 and SOC 2 Type II, applicable across AuraDB tiers. Written processor terms. Processing within the EU.
Workflow orchestration
- Entity
- Temporal Technologies, Inc.
- Purpose
- Managed workflow orchestration (Temporal Cloud).
- Data processed
- Workflow metadata: generic workflow and activity names, and UUID identifiers. Customer content within payloads is encrypted by us before transmission, see the Security Overview.
- Safeguards
- SOC 2 Type II. Does not hold ISO/IEC 27001. DPA incorporating the EU SCCs and the UK IDTA. Per-tenant namespaces with 30-day retention, programmatically deletable.
Business operations
- Entity
- Microsoft Ireland Operations Limited
- Purpose
- Email, document storage and collaboration in connection with account management and support.
- Data processed
- Identification and contact data.
- Safeguards
- ISO/IEC 27001, SOC 2 Type II. Microsoft Data Protection Addendum.
Planned subprocessors
Providers we may engage directly, in addition to our primary Bedrock inference, where a provider’s model performs better for a specific task. Listed in advance so customers have visibility ahead of the notice period. Not currently engaged. Each would run under EU data residency where available, assessed before use.
- Purpose
- Generative AI inference where an OpenAI model performs better for a specific task.
- Data residency
- OpenAI API Platform with European data residency configured per project; model requests and responses are not stored at rest.
- Status
- Under evaluation.
- Purpose
- Generative AI inference using Google Gemini models where they perform better for a specific task.
- Data residency
- EU data residency via Google Cloud Vertex AI in a European region. Model availability varies by region.
- Status
- Under evaluation.
- Purpose
- Direct access to Claude models, in addition to the in-region Bedrock route already described above, where direct API access is preferable.
- Data residency
- Would be assessed for EU data-residency and zero-data-retention terms under Anthropic’s Data Processing Addendum before any use. Claude models are used in-region today via Amazon Bedrock, which does not retain content.
- Status
- Under evaluation.
Cognito and CloudWatch are AWS services covered by the Amazon Web Services entry above, and are named in its purpose rather than listed separately.
Change history
Append only. This table is the record of notice given.
| Date | Version | Change | Notice given |
|---|---|---|---|
| 24 July 2026 | 1.0 | Initial publication | n/a, initial |
Questions
Contact security@euryan.com for security matters, or info@euryan.com otherwise. Our Security Overview and Data Processing Addendum answer most standard supplier-assessment items.