Subprocessor List

Third-party data processors and infrastructure services used by Stallo AI

Subprocessor List

Last Updated: August 18, 2026
Version: 2.0

This document lists the third-party infrastructure providers, AI processors, and data services that 6 Hour AS engages to operate Stallo. In line with our privacy-first design, data routing is transparently structured around EU-native processing and user-configured model choices.

Active Core Infrastructure & Processors

Core Hosting & Database

• Amazon Web Services (AWS)
  • Service: Cloud infrastructure, database storage, and secure hosting.
  • Data Processing: Website traffic logs, waiting list and contact form submissions, and encrypted technical metadata.
  • Location: European Union (eu-central-1).
  • Safeguards: GDPR-compliant Data Processing Agreement (DPA) and EU Standard Contractual Clauses.

AI Processing (Private Workflows & Internal Intelligence)

• Mistral AI
  • Service: Foundation model API for automated backend workflows, chat compression, and data mapping.
  • Data Processing: Private user prompts, workspace text, and background intelligence workflows not managed by explicit user overrides.
  • Location: European Union (France).
  • Safeguards: EU-hosted infrastructure, zero-retention / non-training model guarantees.

Market Signals & Web Research

• Brave Software, Inc. (Brave Search API)
  • Service: Independent web indexing and news signal search queries.
  • Data Processing: Public web search queries used for market monitoring and open intelligence gathering (decoupled from user identity).
  • Location: Global / Privacy-first query architecture.
  • Safeguards: Zero ad-tracking, independent web index independent of major surveillance advertising networks.

User-Configurable Subprocessors & Integrations

Stallo allows users to connect external accounts or select alternative AI model providers for their autonomous agents. Data processing through these channels occurs strictly based on user intent and configuration:

1. External Integrations (User-Connected)

• HubSpot, Inc. – CRM integration (processed only when explicitly connected by the user).
• Microsoft Corporation (Microsoft Teams) – Communication integration (processed only when explicitly connected by the user).

2. Multi-Model Agent Providers (User-Selected Residency)

When users choose to switch models for their agents or interact with public data signals, requests may be routed to top-tier providers. These routes are explicitly labeled with data residency tags (EU / US / Global) in the product UI:

• OpenAI LLC (US / Global options)
• Anthropic PBC (US / Global options)
• Google Cloud / Google AI (EU / US options)

Change Log

Contact

For questions regarding subprocessors, data residency, or international transfers:
📧 privacy@6hour.no

This list was last updated on August 18, 2026.

Document Information

• File: legal/subprocessor-list_v2.0.md
• Category: legal
• Version: 2.0 (semantic)