Sub-processors
Last Updated: February 25, 2026
1 Sub-processors
AIAgens uses the following third-party service providers (sub-processors) to process personal data on behalf of our customers. All sub-processors are contractually bound to comply with GDPR and FADP requirements.
Guarantees across the chain: CH/EU data residency, zero-retention on conversations, AES-256-GCM at rest, TLS 1.3 in transit, ISO 27001 certified datacenters, SOC 2 Type II for key providers, HIN for written transmissions.
2 Category
| Category | Purpose | Data Processed | Location |
|---|---|---|---|
| Telephony/SIP CH | VoIP telephony, SIP trunking | Phone numbers, call metadata (no audio stored) | CH (Switzerland) |
| Encrypted email & backup CH | Encrypted email, secure cloud storage | Encrypted emails, encrypted backups (E2E encrypted) | CH (Switzerland) |
| Secure medical email CH | Healthcare identity network, secure messaging | Healthcare provider identity, secure message routing | CH (Switzerland) |
| Infrastructure hosting | Infrastructure hosting | All customer data (AES-256-GCM encrypted at rest) | EU (Germany) |
| AI voice platform | Voice AI processing, speech synthesis | Audio streams (not recorded) | EU |
| AI language processing | AI language model processing | Conversation text (zero retention, no training) | EU |
| Payments | Payment processing | Payment card data (tokenized), billing info | EU (Ireland) |
| Calendar/OAuth | Analytics, Calendar integration, OAuth | Usage analytics, calendar events, auth tokens | EU (Belgium / Netherlands) |
| Transactional email CH | Email delivery | Email addresses, email content | CH (Switzerland) |
The complete list with the legal names of each sub-processor is available on request, under a signed NDA: contact dpo@aiagens.ch. For the DPA: legal@aiagens.ch.
3 Data Protection Safeguards
All sub-processors are required to:
- Sign Data Processing Agreements (DPA) with appropriate clauses
- Implement technical and organizational security measures
- Process data only according to our documented instructions
- Notify us immediately of any data breaches
- Delete or return data upon termination of services
4 International Data Transfers
For transfers to countries outside Switzerland and the EU/EEA, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or other legally recognized transfer mechanisms. All US-based providers maintain appropriate safeguards including encryption and access controls.
5 Changes to Sub-processors
We may update this list when adding or removing sub-processors. Material changes will be communicated via email to customers at least 30 days in advance, giving you the opportunity to object if the change affects your data processing.
6 Questions?
For questions about our sub-processors or data processing practices, contact:
Data Protection Officer: dpo@aiagens.ch
Address: Piazza Cioccaro 4, 6900 Lugano, Switzerland