Sub-processors
Who processes your data, and why.
Bramm uses a small number of third-party services to deliver the platform. This page lists every sub-processor that may handle personal data belonging to your organisation.
Last updated: June 2026.
| Sub-processor | Purpose | Location | Data involved |
|---|---|---|---|
| Scaleway | Cloud hosting and database infrastructure | EU (Paris / Amsterdam) | All customer data stored in Bramm — policies, tickets, suppliers, users |
| Google (Gemini) | Default AI model for Ask Bramm | USA (via Privacy Shield) | Pseudonymised questions only — real names and PII are replaced with tokens before any data leaves your tenant |
| Mistral AI | Optional AI model — Bramm Sovereign only | EU (France) | Pseudonymised questions only — available as a fully EU-hosted option |
| OpenAI (GPT-5) | Optional AI model — Bramm Sovereign only | USA (via Privacy Shield) | Pseudonymised questions only — real names and PII are replaced with tokens before any data leaves your tenant |
| Anthropic (Claude) | Optional AI model — Bramm Sovereign only | USA (via Privacy Shield) | Pseudonymised questions only — real names and PII are replaced with tokens before any data leaves your tenant |
| Mollie | Payment processing | EU (Netherlands) | Billing and payment data of the subscription holder |
| Plausible Analytics | Website analytics | EU (Germany) | Anonymised website usage data — no personal data, no cookies |
The AI model providers marked "via Privacy Shield" only receive pseudonymised data. The Bramm Privacy Shield replaces all names, email addresses, and other identifiers with stable tokens before any question is transmitted. The model never sees real personal data.
Bramm Sovereign sub-processors (Mistral, OpenAI, Anthropic) are only active if your organisation has enabled the Sovereign add-on. If you have not enabled Sovereign, these sub-processors do not process any data on your behalf.
Questions about this list?
If you have questions about how we handle your data, or if you want to object to a new sub-processor, contact us at privacy@bramm.it. Enterprise customers can negotiate custom DPA terms.
Contact privacy team