Sub-processors
Last updated on 11.11.2026
Dutchview information technology B.V. processes the data in Ed Controls and Flexwhere on behalf of its customers. For hosting and a few supporting services we use other parties. These parties are sub-processors under the GDPR and are bound by the same obligations as Dutchview, set out in a data processing agreement with EU safeguards.
This page is the current list our data processing agreement refers to (article 8.7). When a sub-processor is added or changes, we update this page and inform the contact person of each customer by e-mail in advance.
Sub-processors
| Party | What it does for us | Where the data is | Safeguard |
|---|---|---|---|
| OVHcloud | Hosting, storage and backups of Flexwhere; from the end of 2026 also of Ed Controls. | Roubaix and Gravelines (France) | European company without a US parent; data processing agreement; ISO/IEC 27001 |
| Amazon Web Services (AWS) | Hosting, storage and backups of Ed Controls until the move to OVHcloud; the AI model for the AI features of Ed Controls (see OpenRouter). | Frankfurt (Germany); monthly backups and the AI model in Dublin (Ireland) | Data stays within the EEA; data processing agreement; ISO/IEC 27001 |
| Mailchimp (Mandrill), The Rocket Science Group LLC, part of Intuit Inc. | Sending invitation, system and notification e-mails of Ed Controls and Flexwhere: name and e-mail address; in Ed Controls notifications also titles of tickets and audits and names of projects and drawings; in Flexwhere e-mails reservation details. Content is kept for 24 hours, delivery data for at most 30 days. | United States | Data processing agreement; EU-US Data Privacy Framework and, where that does not cover the transfer, EU standard contractual clauses (2021/914) |
| HubSpot | Support tickets: name, e-mail address and content of questions to our support team. | EU region (Frankfurt, Germany); HubSpot is a US company | Data processing agreement; EU-US Data Privacy Framework and, where that does not cover the transfer, EU standard contractual clauses (2021/914) |
| OpenRouter | Passing requests to the AI model for two features in Ed Controls: the summary in the daily notification e-mail and recognising drawings in uploaded PDF files. Nothing is stored and nothing is used to train the model. | OpenRouter is a US company; the AI model runs at AWS in Dublin (Ireland) | Data processing agreement with EU standard contractual clauses |
Not on this list
- Our development team in India (Dutchview Technologies Private Limited, a group company) has no access to production data, backups or support tickets. Only in exceptional cases, and after your written consent, is a copy of data used to investigate a specific problem, on a test location in the EU.
Certification and questions
Dutchview is certified for ISO 9001 and ISO/IEC 27001. We send the certificate and the Statement of Applicability on request. Questions about this page or about the data processing agreement: privacy@dutchview.com.
