Our GDPR Art. 28 DPA for customers who process personal data through Modilo.
You are the controller; Modilo is the processor acting on your documented instructions.
We process personal data only to provide the mapping, analysis and recommendation services described in the Terms.
Process content is sent to Anthropic PBC solely to generate your output. Anthropic does not train its models on data submitted through its API; limited abuse-monitoring retention applies and is then deleted. Enterprise customers may request Zero Data Retention. Anthropic's data processing terms are published at anthropic.com/legal.
Two, and no others:
| Sub-processor | Purpose | Location | Transfer basis |
|---|---|---|---|
| Render Services, Inc. | Hosting of the application, accounts and stored maps | Frankfurt, Germany (EU) | None required — data stays in the EU |
| Anthropic PBC | AI generation of maps and analyses from your process text | United States | EU Standard Contractual Clauses (Art. 46 GDPR) |
We will give notice of any change and let you object.
EU hosting in Frankfurt, encryption in transit, access controls and minimal retention. See Security.
Hosting, storage and all account data remain in the EU (Frankfurt, Germany).
One processing step takes place outside the EU. The process text you submit for mapping is transmitted to Anthropic PBC in the United States for the sole purpose of generating your output. That transfer relies on the EU Standard Contractual Clauses incorporated in Anthropic's data processing terms, together with supplementary measures (encryption in transit, no training use, and limited retention). No other personal data is transferred outside the EU.
We assist you with data-subject requests and notify you without undue delay of any personal-data breach.
On termination we delete or return personal data per your instruction, subject to legal retention.
Last updated: 10 September 2026.