pulse Energy GmbH - Official Subprocessor List

Scope & DPA linkage
This list identifies third-party subprocessors engaged by pulse Energy GmbH (“pulse”) to deliver and operate our products and related services. It forms part of the Data Processing Agreement (DPA) published here: https://pulse-energy.eu/dpa.

Subprocessors act on pulse’s documented instructions and only for the purposes described below.

Change management
We keep this list current and notify customers of intended changes to subprocessors in accordance with the notification and objection process set out in the DPA.

International data transfers
Where processing occurs exclusively in the EU/EEA, no additional transfer mechanism is required. Where processing involves a third country, we rely on EU Standard Contractual Clauses (SCCs) and other appropriate safeguards as indicated for each entry.

Contact
Privacy inquiries and subprocessor objections (as permitted by the DPA): info@pulse-energy.eu.

––––––––––––––––––––––––––––––––––––

PRODUCTIVITY & COLLABORATION

Google Workspace
• Company: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
• Purpose: Email, document management, calendar, and collaboration tools for business communication and productivity.
• Location of processing: European Union / Global
• Legal basis for transfer: Any third-country transfers are based on SCCs and other appropriate safeguards.
• Functional category: Productivity & Collaboration

Slack
• Company: Slack Technologies Limited, Salesforce Tower, 60 R801, North Dock, Dublin, Ireland
• Purpose: Team communication (messaging, file sharing, workflow integration) for internal collaboration.
• Location of processing: European Union (Ireland)
• Legal basis for transfer: Not required (EU processing)
• Functional category: Productivity & Collaboration

––––––––––––––––––––––––––––––––––––

NETWORK & SECURITY

Tailscale
• Company: Tailscale Inc., 2261 Market Street #4854, San Francisco, CA 94114, USA
• Purpose: Virtual Private Network (VPN) for secure, authenticated remote access to systems for support and maintenance.
• Location of processing: Global (control plane processed globally; traffic end-to-end encrypted)
• Legal basis for transfer: SCCs and other appropriate safeguards.
• Functional category: Network & Security

––––––––––––––––––––––––––––––––––––

DATA PROCESSING & ANALYTICS

PostHog
• Company: PostHog, Inc., 2261 Market Street #4063, San Francisco, CA 94114, USA
• Purpose: Product analytics to understand application usage, identify errors, improve usability, and inform product development.
• Location of processing: European Union (Frankfurt am Main, Germany)
• Legal basis for transfer: Not required (EU processing)
• Functional category: Product Analytics

––––––––––––––––––––––––––––––––––––

BACKEND SERVICES

Supabase
• Company: Supabase, Inc., 970 N Shoreline Blvd, Mountain View, CA 94043, USA
• Purpose: Backend-as-a-Service including hosting of the primary application database.
• Location of processing: European Union (Frankfurt am Main, Germany)
• Legal basis for transfer: Not required (EU processing)
• Functional category: Backend Services

––––––––––––––––––––––––––––––––––––

SOFTWARE DEVELOPMENT

GitHub
• Company: GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA
• Purpose: Development platform for version control, code hosting, and collaboration.
• Location of processing: USA
• Legal basis for transfer: SCCs and other appropriate safeguards.
• Functional category: Software Development

––––––––––––––––––––––––––––––––––––

WEB HOSTING & DEPLOYMENT

Vercel
• Company: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA
• Purpose: Hosting and deployment of frontend applications and backend services for web applications.
• Location of processing: European Union (Frankfurt am Main, Germany)
• Legal basis for transfer: Not required (EU processing)
• Functional category: Web Hosting & Deployment

––––––––––––––––––––––––––––––––––––

PROCESS AUTOMATION

n8n
• Company: n8n GmbH, Novalisstr. 10, 10115 Berlin, Germany
• Purpose: Workflow automation platform for integrating and automating business processes.
• Location of processing: European Union (Germany)
• Legal basis for transfer: Not required (EU processing)
• Functional category: Process Automation

––––––––––––––––––––––––––––––––––––

PAYMENTS

Stripe
• Company: Stripe Payments Europe, Limited, 3 Dublin Landings, North Wall Quay, Dublin 1, D01 C4E0, Ireland
• Purpose: Online payment processing and financial services for e-commerce transactions.
• Location of processing: European Union (Ireland)
• Legal basis for transfer: Not required (EU processing)
• Functional category: Payment Processing

––––––––––––––––––––––––––––––––––––

AI MODEL PROVIDER SUBPROCESSORS

OpenAI (GPT)
• Company: OpenAI, LLC, 1455 3rd Street, San Francisco, CA 94158, USA
• Purpose: Large Language Model (LLM) API services for processing text requests and generating AI-assisted responses.
• Location of processing: USA
• Legal basis for transfer: SCCs and other appropriate safeguards.
• Functional category: AI Model Provider

Google Gemini
• Company: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
• Purpose: Gemini API services for multimodal AI models processing text, image, and other media requests.
• Location of processing: European Union / Global
• Legal basis for transfer: Any third-country transfers are based on SCCs and other appropriate safeguards.
• Functional category: AI Model Provider

Anthropic Claude
• Company: Anthropic PBC, 548 Market Street, San Francisco, CA 94104, USA
• Purpose: Claude API services providing LLM functionality for secure and reliable AI text processing.
• Location of processing: USA
• Legal basis for transfer: SCCs and other appropriate safeguards.
• Functional category: AI Model Provider

PerplexityAI (Sonar)
• Company: Perplexity AI, Inc., 115 Sansome Street, Suite 900, San Francisco, CA 94104, USA
• Purpose: Sonar API services for AI-assisted search capabilities and information synthesis with real-time data connectivity.
• Location of processing: USA
• Legal basis for transfer: SCCs and other appropriate safeguards.
• Functional category: AI Model Provider

Meta AI
• Company: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland
• Purpose: Meta AI API services for Llama models and other AI capabilities for text processing and generation.
• Location of processing: European Union (Ireland)
• Legal basis for transfer: Not required (EU processing)
• Functional category: AI Model Provider

Microsoft 365 (Teams & Copilot)
• Company: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
• Purpose: Microsoft 365 services including Teams for communication and file sharing, and Microsoft Copilot for AI-assisted productivity and text processing within the Microsoft 365 environment.
• Location of processing: Global / European Union (depending on tenant configuration); processing follows data residency settings configured in the Microsoft 365 Admin Center.
• Legal basis for transfer: SCCs and other appropriate safeguards.
• Functional category: AI Model Provider & Productivity & Collaboration

xAI (Grok)
• Company: X.AI Corp., 1450 Page Mill Road, Palo Alto, CA 94304, USA
• Purpose: Grok API services providing LLM functionality with a focus on real-time information and conversational AI.
• Location of processing: USA
• Legal basis for transfer: SCCs and other appropriate safeguards.
• Functional category: AI Model Provider

Mistral
• Company: Mistral AI SAS, 15 Rue Des Halles, 75001 Paris, France
• Purpose: Mistral API services for large language models enabling efficient and adaptable AI text processing.
• Location of processing: European Union (France)
• Legal basis for transfer: Not required (EU processing)
• Functional category: AI Model Provider

––––––––––––––––––––––––––––––––––––

Note
Processing is limited to the minimum personal data necessary for the stated purpose and is subject to contractual confidentiality, security, and data protection obligations consistent with the DPA.