Link to Podero - Trust Center monitored by oneleet
Podero Security Program Overview.pdf
Last updated: 8 October 2026
| Name and address of
| sub-processor(s) | Description of services | Place of processing | Further documents & certifications |
|---|---|---|---|
| Google Cloud EMEA Limited | |||
| 70 Sir John Rogerson’s Quay | |||
| Dublin 2 | |||
| Ireland | |||
| Company reg. nr.: 660412 | • Hosting and operation of the Podero platform | ||
| • Data storage and processing | |||
| • Database management | |||
| • Network services | • Primary data centre: St. Ghislain, Belgium | ||
| • Additional data centres for backups in the EU region | ISO/IEC 27001, 27017, 27018, 27701 | ||
| SOC 1/2/3, BSI C5:2020 | |||
| • Google Cloud DPA | |||
| Google Ireland Limited | |||
| (Google Workspace) | |||
| Gordon House | |||
| Barrow Street | |||
| Dublin 4 | |||
| Ireland | • Email communication and office applications | ||
| • Includes inbound customer correspondence | EU data centres | ISO/IEC 27001, 27017, 27018, 27701 | |
| SOC 2/3, BSI C5 | |||
| • Google Workspace DPA | |||
| Cloudflare, Inc. | |||
| 101 Townsend Street | |||
| San Francisco, CA 94107 | |||
| USA | • Content delivery network | ||
| • DDoS protection and web application firewall | |||
| • DNS services | Global edge network with data centres in the EU | ISO/IEC 27001, SOC 2 Type II | |
| Certified under the EU-US Data Privacy Framework; EU SCCs form part of the DPA | |||
| • Cloudflare DPA | |||
| • Cloudflare Privacy Policy | |||
| Sentry | |||
| Functional Software, Inc. | |||
| 45 Fremont Street, 8th Floor | |||
| San Francisco, CA 94105 | |||
| USA | |||
| Company reg. nr.: 5214647 | • Error tracking and alerting | ||
| • Technical logs and stack traces, generally without personal content data, may include pseudonymised identifiers | • Frankfurt, Germany | ||
| • Backups in the EU region | |||
| • Parent company in the USA, processing takes place within the EEA | SOC 2 Type II, ISO/IEC 27001 | ||
| HIPAA attestation | |||
| EU SCCs form part of the DPA | |||
| • Sentry DPA | |||
| Mixpanel, Inc. | |||
| 1 Front Street, 28th Floor | |||
| San Francisco, CA 94111 | |||
| USA | • Product analytics on use of the Podero application | ||
| • Pseudonymised event and usage data | EU data residency: Eemshaven, Netherlands (GCP europe-west4) | SOC 2 Type II, ISO/IEC 27001, ISO/IEC 27701 | |
| Certified under the EU-US Data Privacy Framework; EU SCCs form part of the DPA | |||
| • Mixpanel DPA | |||
| Pylon Labs, Inc. | |||
| 690 5th Street | |||
| San Francisco, CA 94107 | |||
| USA | • B2B customer support platform | ||
| • Handling of support requests, including contact details and ticket content | USA | SOC 2 Type II, ISO/IEC 27001:2022, ISO/IEC 42001:2023, HIPAA | |
| EU SCCs form part of the DPA | |||
| Slack Technologies Limited | |||
| Salesforce group | |||
| Ireland | • Internal company communication | ||
| • Shared Slack Connect channels with customers, which may contain contact details and content from customer communication | Data centres in the EU | ISO/IEC 27001, SOC 2 Type II | |
| EU SCCs form part of the DPA | |||
| • Slack sub-processors | |||
| Linear Orbit, Inc. | |||
| 2261 Market St STE 10632 | |||
| San Francisco, CA 94114 | |||
| USA | • Issue and project tracking | ||
| • Contains device and member IDs for debugging; no end-user contact details | USA | SOC 2 Type II | |
| EU SCCs form part of the DPA | |||
| • Linear DPA | |||
| • Linear sub-processors | |||
| Smartcar | |||
| 650 Castro St | |||
| Suite 120-99699 | |||
| Mountain View, CA 94041 | |||
| Company reg. nr.: 5635324 | |||
| USA | • Access to vehicle data | ||
| • Connecting a vehicle is based on a direct agreement between the end customer and Smartcar | Mountain View, CA, USA | • Smartcar DPA | |
| • Smartcar Data Security | |||
| • EU Standard Contractual Clauses (SCC) | |||
| OpenAI Ireland Limited | |||
| 1st Floor, The Liffey Trust Centre | |||
| 117-126 Sheriff Street Upper | |||
| Dublin 1, D01 YC43 | |||
| Ireland | |||
| Company reg. nr.: 737350 | • AI model processing for the Lila assistant in the Podero console | ||
| • Personal data is removed before transmission: names, email addresses, telephone numbers, postal addresses, precise coordinates and credentials are stripped by the platform and are not sent to the model | |||
| • API inputs and outputs are not used to train OpenAI models | USA | SOC 2 Type II | |
| EU SCCs form part of the DPA | |||
| • OpenAI DPA | |||
| • OpenAI Enterprise privacy | |||
| Langfuse GmbH | |||
| (a ClickHouse company) | |||
| Oranienburgerstraße 91 | |||
| 10178 Berlin | |||
| Germany | |||
| Company reg. nr.: HRB 248821 B | • Tracing and evaluation of the Lila assistant in the Podero console: prompts, model responses and tool calls | ||
| • Personal data is removed before transmission, in the same way as for OpenAI | • EU region: AWS eu-west-1, Ireland | ||
| • Support by ClickHouse affiliates, some of them in the USA | SOC 2 Type II, ISO/IEC 27001 | ||
| • ClickHouse DPA | |||
| • Langfuse sub-processors | |||
| LCloud Sp. z o.o. | |||
| Złota 59 | |||
| 00-120 Warsaw | |||
| Poland | |||
| Company reg. nr.: KRS 0000656304 | • Operation and maintenance of the Podero infrastructure on Google Cloud | ||
| • Administrative access to production systems | • Poland (EU) | ||
| • Systems in Google Cloud europe-west1, Belgium | No transfer outside the EEA |
Stand: 8. Oktober 2026
| Name und Anschrift des/der
| Unterauftragnehmer(s) | Beschreibung der Teilleistungen | Ort der Leistungserbringung | Weitere Dokumente & Zertifizierungen |
|---|---|---|---|
| Google Cloud EMEA Limited | |||
| 70 Sir John Rogerson’s Quay | |||
| Dublin 2 | |||
| Irland | |||
| Company reg. nr.: 660412 | • Hosting und Betrieb der Podero-Plattform | ||
| • Datenspeicherung und -verarbeitung | |||
| • Datenbankverwaltung | |||
| • Netzwerkdienste | • Primär genutztes Rechenzentrum: St. Ghislain, Belgien | ||
| • Weitere Rechenzentren für Backups in der EU-Region | ISO/IEC 27001, 27017, 27018, 27701 | ||
| SOC 1/2/3, BSI C5:2020 | |||
| • Google Cloud DPA | |||
| Google Ireland Limited | |||
| (Google Workspace) | |||
| Gordon House | |||
| Barrow Street | |||
| Dublin 4 | |||
| Irland | • E-Mail-Kommunikation und Office-Anwendungen | ||
| • Umfasst eingehende Kundenkorrespondenz | EU-Rechenzentren | ISO/IEC 27001, 27017, 27018, 27701 | |
| SOC 2/3, BSI C5 | |||
| • Google Workspace DPA | |||
| Cloudflare, Inc. | |||
| 101 Townsend Street | |||
| San Francisco, CA 94107 | |||
| USA | • Content Delivery Network | ||
| • DDoS-Schutz und Web Application Firewall | |||
| • DNS-Dienste | Globales Edge-Netzwerk mit Rechenzentren in der EU | ISO/IEC 27001, SOC 2 Type II | |
| Zertifiziert nach dem EU-US Data Privacy Framework; EU-Standardvertragsklauseln (SCC) sind Bestandteil des DPA | |||
| • Cloudflare DPA | |||
| • Cloudflare Datenschutzerklärung | |||
| Sentry | |||
| Functional Software, Inc. | |||
| 45 Fremont Street, 8th Floor | |||
| San Francisco, CA 94105 | |||
| USA | |||
| Company reg. nr.: 5214647 | • Error Tracking und Alerting | ||
| • Technische Logs und Stacktraces, in der Regel ohne personenbezogene Inhaltsdaten, ggf. pseudonymisierte Identifier | • Frankfurt, Deutschland | ||
| • Backups in der EU-Region | |||
| • Muttergesellschaft in den USA, Verarbeitung erfolgt innerhalb des EWR | SOC 2 Type II, ISO/IEC 27001 | ||
| HIPAA-Attestierung | |||
| EU-Standardvertragsklauseln (SCC) sind Bestandteil des DPA | |||
| • Sentry DPA | |||
| Mixpanel, Inc. | |||
| 1 Front Street, 28th Floor | |||
| San Francisco, CA 94111 | |||
| USA | • Produkt-Analytics zur Nutzung der Podero-Anwendung | ||
| • Pseudonymisierte Event- und Nutzungsdaten | EU Data Residency: Eemshaven, Niederlande (GCP europe-west4) | SOC 2 Type II, ISO/IEC 27001, ISO/IEC 27701 | |
| Zertifiziert nach dem EU-US Data Privacy Framework; EU-Standardvertragsklauseln (SCC) sind Bestandteil des DPA | |||
| • Mixpanel DPA | |||
| Pylon Labs, Inc. | |||
| 690 5th Street | |||
| San Francisco, CA 94107 | |||
| USA | • B2B-Customer-Support-Plattform | ||
| • Bearbeitung von Support-Anfragen inkl. Kontaktdaten und Ticketinhalten | USA | SOC 2 Type II, ISO/IEC 27001:2022, ISO/IEC 42001:2023, HIPAA | |
| EU-Standardvertragsklauseln (SCC) sind Bestandteil des DPA | |||
| Slack Technologies Limited | |||
| Salesforce-Gruppe | |||
| Irland | • Interne Unternehmenskommunikation | ||
| • Gemeinsame Slack-Connect-Kanäle mit Kunden, dort ggf. Kontaktdaten und Inhalte aus der Kundenkommunikation | Rechenzentren in der EU | ISO/IEC 27001, SOC 2 Type II | |
| EU-Standardvertragsklauseln (SCC) sind Bestandteil des DPA | |||
| • Slack Sub-Prozessoren | |||
| Linear Orbit, Inc. | |||
| 2261 Market St STE 10632 | |||
| San Francisco, CA 94114 | |||
| USA | • Issue- und Projekttracking | ||
| • Enthält zur Fehleranalyse Geräte- und Mitglieds-IDs, keine Kontaktdaten von Endnutzern | USA | SOC 2 Type II | |
| EU-Standardvertragsklauseln (SCC) sind Bestandteil des DPA | |||
| • Linear DPA | |||
| • Linear Sub-Prozessoren | |||
| Smartcar | |||
| 650 Castro St | |||
| Suite 120-99699 | |||
| Mountain View, CA 94041 | |||
| Company reg. nr.: 5635324 | |||
| USA | • Zugriff auf Fahrzeugdaten | ||
| • Die Anbindung eines Fahrzeugs erfolgt auf Grundlage einer direkten Vereinbarung zwischen Endkunde und Smartcar | Mountain View, CA, USA | • Smartcar DPA | |
| • Smartcar Data Security | |||
| • EU-Standardvertragsklauseln (SCC) | |||
| OpenAI Ireland Limited | |||
| 1st Floor, The Liffey Trust Centre | |||
| 117-126 Sheriff Street Upper | |||
| Dublin 1, D01 YC43 | |||
| Irland | |||
| Company reg. nr.: 737350 | • KI-Modellverarbeitung für den Assistenten Lila in der Podero-Konsole | ||
| • Personenbezogene Daten werden vor der Übertragung entfernt: Namen, E-Mail-Adressen, Telefonnummern, Postanschriften, genaue Koordinaten und Zugangsdaten werden von der Plattform entfernt und nicht an das Modell gesendet | |||
| • Ein- und Ausgaben der API werden nicht zum Training von OpenAI-Modellen verwendet | USA | SOC 2 Type II | |
| EU-Standardvertragsklauseln (SCC) sind Bestandteil des DPA | |||
| • OpenAI DPA | |||
| • OpenAI Enterprise Privacy | |||
| Langfuse GmbH | |||
| (ein Unternehmen von ClickHouse) | |||
| Oranienburgerstraße 91 | |||
| 10178 Berlin | |||
| Deutschland | |||
| Company reg. nr.: HRB 248821 B | • Tracing und Auswertung des Assistenten Lila in der Podero-Konsole: Prompts, Modellantworten und Tool-Aufrufe | ||
| • Personenbezogene Daten werden vor der Übertragung entfernt, wie bei OpenAI | • EU-Region: AWS eu-west-1, Irland | ||
| • Support durch verbundene Unternehmen von ClickHouse, teilweise in den USA | SOC 2 Type II, ISO/IEC 27001 | ||
| • ClickHouse DPA | |||
| • Langfuse Sub-Prozessoren | |||
| LCloud Sp. z o.o. | |||
| Złota 59 | |||
| 00-120 Warschau | |||
| Polen | |||
| Company reg. nr.: KRS 0000656304 | • Betrieb und Wartung der Podero-Infrastruktur in Google Cloud | ||
| • Administrativer Zugriff auf Produktivsysteme | • Polen (EU) | ||
| • Systeme in Google Cloud europe-west1, Belgien | Keine Übermittlung außerhalb des EWR |