grantus.

LEGAL · SUB-PROCESSORS

Sub-processors 8

Authoritative versioned list of third parties engaged by Digitálny Inovátor, s. r. o. for the grantus service. Both the privacy policy and the DPA point here for the current state. Procurement teams can subscribe to changes via the RSS feed at /dpa/subprocessors.rss (ships in a follow-up) or just diff this page month-over-month.

Any addition or replacement is announced 14 days before it takes effect via the e-mail address on file (DPA §4). Object inside the window to receive a pro-rata refund.

NÁZOVÚČELDÁTALOKALITAPRENOSPRIDANÉ
AnthropicAI classification of grant call public text via the Claude APIPublic grant-call content + the customer’s eligibility query stringUnited StatesEU SCCs 2021/914 Module 3 + supplementary measures15. 04. 2026
Better Stack (Logtail)Uptime monitoring + structured log shippingPino JSON log lines; request method + path + status code; no request bodiesEU regionEEA processing29. 05. 2026
Hostinger CloudInfrastructure, database, and object storage hostingAll customer-side data at rest (encrypted with AES-256)EU (Frankfurt) regionEEA processing15. 04. 2026
PostHogProduct analytics — funnels, retention, feature flagsDistinct id + email after signin + explicit named events; no IP, no autocaptureeu.posthog.com (EU instance)EEA processing29. 05. 2026
ResendTransactional and notification e-mail deliveryRecipient email address + message bodyEU sub-regionEEA processing15. 04. 2026
SentryBackend and frontend error monitoringStack traces + trace id; no request bodies, query strings, or credentialsEU regionEEA processing29. 05. 2026
StripePayment processing (once paid plans go live)Cardholder data (Stripe is the processor of record; we never touch PAN)EU sub-regionEU SCCs where applicable15. 06. 2026
Voyage AIEmbedding generation for semantic searchPublic grant-call text only (no customer PII)United StatesEU SCCs 2021/914 Module 315. 04. 2026

Otázky alebo námietky → gdpr@grantus.sk