These are the providers that process Customer Data for Atlas, under the Data Processing Agreement (Annex 3). We notify customers by email at least 30 days before adding or replacing a subprocessor.
| Subprocessor | What it does | Data it receives | Location |
|---|---|---|---|
| Hetzner Online GmbH | Hosts the Atlas servers. | All platform data: accounts, documents, index, conversations. | Germany (EU) |
| Mathpix, Inc. | Converts PDFs to text, formulas (LaTeX) and tables, and crops figure images, which we then keep ourselves. | Uploaded PDF documents. | Processing through Mathpix’s EU infrastructure (eu.api.mathpix.com). US company. |
| Voyage AI (MongoDB, Inc.) | Computes the numerical representations used for semantic and visual search. | Document passages, figure images and search queries. | United States |
| Cohere Inc. | Ranks search results by relevance. | The search query and the candidate passages. | Canada, United States |
| Google LLC (Gemini API) | Writes answers and conversation titles, plus short descriptions of formulas and figures. | The question, part of the conversation history, the passages found, formulas and figure images. | United States and other Google locations |
Transfer safeguards. For providers outside the European Economic Area, transfers are based on an adequacy decision (including the EU–U.S. Data Privacy Framework, for certified companies) or the European Commission’s standard contractual clauses.
What providers keep. AI providers receive data only to return a result to us, in configurations that do not let them train models on it. They may keep it for a limited period for security and abuse prevention, under their contracts. Right after a document is processed, we ask Mathpix to delete everything it kept for it (the source, the results and the images) and check that it did. Without that request, Mathpix would keep the source for at most 30 days and the results for at most 90 days.
Not subprocessors. Cloudflare manages the domain’s DNS records and forwards emails sent to contact@atlas-ai.ro; it does not receive the application’s traffic. Cloudflare and our email provider (Google) receive messages sent to the team, for which we are the controller; see the Privacy Policy.
For questions, or to be notified of changes, write to contact@atlas-ai.ro.