Service providers
Every provider below processes in the EU/EEA. Your document content stays on EU infrastructure and is never sent to a third-party AI provider.
Service providers and recipients of personal data engaged by HexRead (HexWorld Solutions GmbH) to operate the service. Most act as our data processors (Art. 28 GDPR); payment providers such as Stripe process payment data partly under their own responsibility. All locations are in the EU/EEA, or a documented transfer safeguard is in place (Art. 44 ff. GDPR). Last reviewed: 2026-07-24.
| Provider | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Scaleway SAS | EU cloud infrastructure - hosting, compute, and transient encrypted document blobs on local disk (no object storage) - plus delivery of transactional email (sign-in one-time codes/OTP, security and account notifications, billing receipts; no marketing). All document processing and platform operations run on this infrastructure. | France (Paris) | None required (processing exclusively in the EU/EEA). |
| Stripe Payments Europe, Ltd. | Subscription billing, payment processing (cards + SEPA Direct Debit), and VAT (Stripe Tax). Stripe receives account, billing, and payment data only - never document content. | Ireland | Onward transfer to Stripe, Inc. (USA) for parts of the payment processing under EU Standard Contractual Clauses (SCC) and the EU-US Data Privacy Framework (DPF). |
| Lexware Office (Haufe Service Center GmbH) | Accounting and statutory bookkeeping - recording and audit-proof archiving of inbound supplier invoices, plus posting of outgoing invoices and revenue (commercial and tax books, §147 AO / §257 HGB). Processes invoice and contact data of business partners and customers - never the content of converted documents. | Germany (Freiburg; data centres in the Frankfurt am Main area) | None required (processing exclusively in the EU/EEA). |
| mailbox.org (Heinlein Hosting GmbH) | Business email mailboxes - receiving and answering messages sent to our published contact addresses (privacy, support, security, and sales enquiries). | Germany (Berlin) | None required (processing exclusively in the EU/EEA). |
Self-hosted - no external providers
- Identity management (sign-in and accounts) - Software operated by HexWorld itself on Scaleway (EU) - not an external provider. The underlying infrastructure is Scaleway (listed above).
- Automated sign-up protection - Protection we operate ourselves at sign-in - no third-party verification service, no cookies; no data is transmitted to third parties.
Changes
We review this list regularly and update it whenever providers are added, replaced, or removed. The version published here is authoritative and is kept consistent with the records of processing activities (recipients).