Subprocessors
Last updated: 2026-01-09
This page lists the third-party service providers (“Subprocessors”) that Mikko Finell (“we”, “us”) uses to process personal data on behalf of our customers as part of providing the TeaLab.io Service (the “Service”).
A Subprocessor is a third party that we engage to process personal data that is submitted to the Service, in accordance with our instructions, as described in our Data Processing Agreement (DPA) and Privacy Policy.
We carefully select our Subprocessors and require them to comply with applicable data protection laws and to implement appropriate technical and organizational measures.
1. Current Subprocessors
| Subprocessor | Purpose / Role | Location of Processing | Categories of Data Processed | Transfers Outside EU/EEA | Safeguards |
|---|---|---|---|---|---|
| DigitalOcean, LLC | Cloud infrastructure and hosting provider for the Service (application servers, databases, storage) | Primary: EU (Frankfurt, Germany) | Account data (e.g. user email), configuration data, user-uploaded content, generated outputs, logs and telemetry necessary to operate the Service | Data is hosted in the EU region. Limited access from other regions may occur for support and operations. | Data Processing Agreement with DigitalOcean, EU-region hosting, appropriate contractual safeguards (e.g., SCCs) where applicable |
| OpenAI, L.L.C. | AI processing provider used to run AI workflows (e.g. generating reports from user-uploaded documents and prompts) | United States | User-uploaded documents and files, prompts, configuration parameters, and intermediate content necessary to generate AI outputs. We do not send user account details (e.g. email) as part of AI requests. | Yes – personal data contained in uploaded content may be transferred to the US for processing. | Data Processing Agreement / online terms, EU–US transfers based on appropriate safeguards (e.g., Standard Contractual Clauses). Configured so data is not used to train models or improve the service for third parties (where such options are available). |
| Cloudflare, Inc. | DNS, network edge, security and performance services (e.g. DDoS protection, TLS termination, caching as configured) | Global infrastructure (including EU and non-EU locations) | IP addresses, HTTP(S) request metadata, basic traffic logs and any cached content as configured by us. No direct access to your account data from the application database. | Yes – network traffic and related metadata may be processed on Cloudflare infrastructure worldwide. | Data Processing Agreement / online terms, appropriate transfer safeguards (e.g., Standard Contractual Clauses). Security and compliance certifications as published by Cloudflare. |
2. Nature of Processing
Each Subprocessor processes personal data only to the extent necessary to provide the relevant service to us, in order for us to deliver the Service to you.
- DigitalOcean stores and processes data needed to operate the Service (e.g. databases, file storage, logs).
- OpenAI receives the content you choose to send to AI workflows (documents, text, prompts) and returns generated outputs.
- Cloudflare processes network traffic data to deliver content securely and efficiently and to protect against attacks.
Subprocessors do not determine the purposes or means of processing; they act on our documented instructions.
3. Updates to this List
We may add or replace Subprocessors from time to time (for example, to improve performance, security, or functionality).
When we add a new Subprocessor that will process personal data on behalf of our customers, we will:
- Update this Subprocessor List, and
- Where required by our DPA or applicable law, notify customers in advance and give them an opportunity to object in accordance with the DPA.
If you are a customer and wish to receive notifications about changes to our Subprocessors, please contact us at [email protected].
4. More Information
For more information about how we process personal data, including international data transfers and data subject rights, please see our:
- Privacy Policy
- Data Processing Agreement, if applicable
If you have any questions about this Subprocessor List, you can contact us at:
Mikko Finell
Email: [email protected]