Last updated: 29 May 2026

Subprocessor List

This English version is provided for convenience. If legal interpretation differs, the German version applies unless mandatory law provides otherwise.

This list names service providers that, depending on configuration and use of clutr, may process personal data as subprocessors or independent providers.

Active core providers

Amazon Web Services EMEA SARL / Amazon Web Services, Inc.
Purpose: hosting, compute, database, S3 storage, encryption, backups, email delivery via SES, logging and infrastructure.
Data: account data, documents, OCR text, metadata, technical logs, email data and storage objects.

OpenAI, L.L.C. or affiliated OpenAI providers
Purpose: AI-supported classification, metadata extraction, embeddings and questions to documents, where these functions are used.
Data: document excerpts, OCR text, file names, metadata, search or question content.

PayPal
Purpose: payment processing and credit top-ups.
Data: payment amount, currency, payment status, order and transaction references, account and payment data at the payment provider.

Optional integrations

Google
Purpose: Google Drive connection, OAuth, file storage or import where activated by the user.
Data: OAuth data, file names, paths, documents and metadata.

Microsoft
Purpose: OneDrive connection, OAuth, file storage or import where activated by the user.
Data: OAuth data, file names, paths, documents and metadata.

Dropbox
Purpose: Dropbox connection, file storage or import where activated by the user.
Data: OAuth data, file names, paths, documents and metadata.

STRATO / HiDrive
Purpose: HiDrive WebDAV connection, file storage or import where activated by the user.
Data: credentials or tokens, file names, paths, documents and metadata.

Changes

New or changed subprocessors will be added to this list. Business customers may object for important data protection reasons where the change affects their data processing.