Legal
These are the data processing agreements (DPAs) we have signed with our sub-processors. We publish them here to be transparent about how data is handled across our infrastructure.
All sub-processors are based in the European Union. No data is transferred outside the EEA. For a full overview including DPA status, see the sub-processor list.
Hetzner Online GmbH
Hetzner hosts all Klai infrastructure in Helsinki, Finland. We signed a DPA with Hetzner on 7 March 2026. Hetzner’s security practices are audited annually by TÜV Rheinland.
Moneybird B.V.
Moneybird processes billing data on our behalf: invoices, subscriptions, and SEPA direct debit. Moneybird is a Dutch company subject to Dutch and EU law.
Mistral AI SAS
Mistral processes AI queries on our behalf. Mistral is a French company and their DPA is accepted automatically upon account creation. Mistral does not retain query data.
- Mistral DPA (external, Mistral publishes this centrally)
Cloud86
Cloud86 is our SMTP relay for invitation emails. Cloud86 is a Dutch company and processes only recipient email addresses in transit to deliver messages.
DPA status: not yet signed. We are in the process of completing a DPA with Cloud86. Until this is signed, Cloud86 operates without a formal data processing agreement. We will update this page when the DPA is in place.