Legal

Subprocessors

Our Data Processing Agreement governs how elevaite365 processes personal data on behalf of our customers. It sets out the subject matter and duration of processing, the categories of data and data subjects, security measures, and the subprocessors we rely on to deliver the service.

Authorized subprocessors

Who we rely on to deliver the service

The subprocessors below are authorized under the Data Processing Agreement. Last updated September 18, 2026.

Company	Scope of service	Transfer outside the EU/EEA	Country and ground for transfer
Microsoft Corporation	Cloud hosting, infrastructure, and database services for the Software SaaS environment, in the Azure region selected by the customer.	Yes	USA, or another country where Microsoft or its subprocessors are established according to Microsoft's subprocessor list, as updated from time to time. Applicable transfer mechanisms (for example the EU-US Data Privacy Framework, Standard Contractual Clauses, or local equivalent safeguards) apply based on customer location and data residency regulations.
Microsoft CorporationAzure OpenAI Service	AI and large language model infrastructure and natural language processing capabilities for the Software SaaS environment, in the Azure region selected by the customer.	Yes	USA, or another country where Microsoft or its subprocessors are established according to Microsoft's subprocessor list, as updated from time to time. Applicable transfer mechanisms (for example the EU-US Data Privacy Framework, Standard Contractual Clauses, or local equivalent safeguards) apply based on customer location and data residency regulations.
Linear Orbit, Inc.	Customer support ticketing system, issue tracking, and end-user communication channels.	Yes	USA. EU-US Data Privacy Framework and/or Standard Contractual Clauses.

Microsoft Corporation

Scope of service: Cloud hosting, infrastructure, and database services for the Software SaaS environment, in the Azure region selected by the customer.
Transfer outside the EU/EEA: Yes
Country and ground for transfer: USA, or another country where Microsoft or its subprocessors are established according to Microsoft's subprocessor list, as updated from time to time. Applicable transfer mechanisms (for example the EU-US Data Privacy Framework, Standard Contractual Clauses, or local equivalent safeguards) apply based on customer location and data residency regulations.

Microsoft Corporation

Azure OpenAI Service

Scope of service: AI and large language model infrastructure and natural language processing capabilities for the Software SaaS environment, in the Azure region selected by the customer.
Transfer outside the EU/EEA: Yes
Country and ground for transfer: USA, or another country where Microsoft or its subprocessors are established according to Microsoft's subprocessor list, as updated from time to time. Applicable transfer mechanisms (for example the EU-US Data Privacy Framework, Standard Contractual Clauses, or local equivalent safeguards) apply based on customer location and data residency regulations.

Linear Orbit, Inc.

Scope of service: Customer support ticketing system, issue tracking, and end-user communication channels.
Transfer outside the EU/EEA: Yes
Country and ground for transfer: USA. EU-US Data Privacy Framework and/or Standard Contractual Clauses.