Qelta ApS engages a limited number of third-party providers ("sub-processors") to deliver the Qelta platform. This page lists them, what they do, and where data is processed. It is maintained as the authoritative list referenced in our Data Processing Agreement.
We keep this list deliberately short. Every addition increases our customers' third-party risk surface, and our customers are supervised institutions who must account for it.
1. Platform sub-processors
These providers may process customer data — including case content submitted for review — in the course of delivering the platform.
| Sub-processor | Role | Region |
|---|---|---|
| Railway Corp. | Application hosting, storage, compute | EU West (Amsterdam) |
| OpenAI Ireland Ltd. | Language-model inference for automated review | EU |
| Google Cloud (Vertex AI) | Language-model inference for automated review | EU (multi-region) |
| Clerk Inc. | User authentication and identity management — no case content | United States (SCCs) |
| Sentry | Application error tracking and diagnostics — no case content | EU |
Data residency
All customer case content is stored and processed within the European Union, including all language-model inference. Case content is not transferred outside the EU/EEA.
The only element of the platform architecture processed outside the EU is authentication data (user name, business email, session data), processed by Clerk Inc. in the United States under Standard Contractual Clauses. No case content is processed by Clerk.
Error diagnostics are processed by Sentry in the EU. We do not use session recording or replay; only technical error information is collected, and no case content is captured.
Clerk does not currently offer an EU data-residency option on our plan; we will migrate this processing to the EU if and when that becomes available.
Commitments regarding the AI model provider
Because model processing is the question our customers ask first, we state our position explicitly:
- Customer data submitted for evaluation is not used to train or fine-tune our model providers' models.
- Inference is performed via EU-region endpoints, so case content does not leave the EU/EEA.
- We do not use customer data to train any Qelta-proprietary model.
2. Corporate sub-processors
These providers support our business operations and do not process customer case content.
| Sub-processor | Role | Region |
|---|---|---|
| Vercel Inc. | Website hosting and aggregate analytics | EU |
| Resend | Delivery of website form submissions | United States (SCCs) |
| Google Ireland Ltd. (Workspace) | Business correspondence | EU |
3. Changes to this list
We notify customers in advance of adding or replacing a platform sub-processor, or of a change to the region in which customer data is processed, in accordance with our Data Processing Agreement.
- Notice period: at least 30 days before the change takes effect.
- How we notify: email to the contact designated in the customer agreement, and an updated version of this page.
- Objection: customers may object on reasonable data-protection or regulatory grounds within the notice period, following the process in the DPA.
- Change history: material changes are recorded below.
Change history
| Date | Change | Version |
|---|---|---|
| August 2026 | Initial publication | 1.0 |
Contact
Qelta ApS · CVR 46661885 · Strandvejen 73B, st. tv, 2100 København Ø, Denmark · contact@qelta.ai