Legal information
Sub-processors
Last updated: 31 October 2026
Document to be validated by a lawyer. Items marked [À VALIDER] must be completed and the whole text reviewed by a legal professional before commercial launch. Only the French version of this document is legally binding.
These are the providers that process personal data on behalf of KAYZEN, with their role, location and the safeguards that apply. Any change is announced to business customers at least 30 days in advance.
| Provider | Role | Location | Data | Applies to |
|---|---|---|---|---|
| Vercel Inc. | Hosting of the public site and its server functions (running in the Paris region), and cookie-free audience measurement if active | United States (global network) | Technical logs, form data in transit, aggregated audience statistics | Site |
| Resend (Plus Five Five, Inc.) | Sending of transactional emails (forms, address verification) | United States | Email address, name, message content | Site and service |
| Customer data host [À VALIDER] | Hosting of the console, databases and telemetry | European Union | Data processed by the platform | Service |
| Stripe Payments Europe, Ltd. | Payment for business offers | Ireland (transfers to the United States possible) | Billing details, payment data | Business offers |
| Anthropic, PBC | AI model for Kayzen Copilot, only if the module is enabled | United States | Questions asked and the minimised data needed to answer | Copilot option |
- Transfer safeguards (EU–US Data Privacy Framework or standard contractual clauses) are to be checked and documented for each provider based outside the EU. [À VALIDER]
- For K-Mail, Microsoft and Google are not KAYZEN sub-processors: they are the customer's email providers, to which the platform connects with the customer's authorisation.
- No advertising or data-resale provider is used.