Sub-processors

This page lists the sub-processors that File system relies on to provide the Rivadesk service, pursuant to Article 28 of Regulation (EU) 2016/679 (the "GDPR") and consistently with the Data Processing Addendum (DPA) and the Privacy Policy. Each sub-processor processes personal data solely to deliver the service's functionality, under a contract imposing data protection obligations equivalent to those undertaken by File system.

The main infrastructure and data storage are located in Unione Europea (SEE). Any transfers to third countries take place only where adequate safeguards under Chapter V of the GDPR are in place, in particular the Standard Contractual Clauses (SCCs) approved by the European Commission or an adequacy decision.

List of sub-processors

• Aruba S.p.A. — Hosting and cloud infrastructure — Italy (European Union, EEA).

• Stripe Payments Europe, Ltd. (Stripe, Inc. group) — Payment processing and invoicing — Ireland (EU) and United States, under Standard Contractual Clauses (SCCs).

• Resend, Inc. — Transactional email delivery (notifications, verifications and service communications) — United States, under Standard Contractual Clauses (SCCs).

• Google (Google Ireland Limited / Google LLC) — Artificial intelligence services (Gemini API and Vertex AI, with processing in an EU region) and Google account authentication — European Union and United States, under Standard Contractual Clauses (SCCs).

• Mistral AI SAS — Artificial intelligence services (large language models) — France (EU).

The list may be updated to reflect technical or organisational changes. File system will inform customers of changes concerning the addition or replacement of sub-processors, giving them the opportunity to object on legitimate and reasonable data protection grounds. For requests or objections you can write to info@rivadesk.com.

This page is informational and supplements the DPA and the Privacy Policy, which prevail in the event of any conflict. Last updated: 30 giugno 2026.