Sub-processors

Last updated: 11 March 2026

To operate the Monti Service, we share limited personal data with the following sub-processors. All sub-processors are contractually required to process data only on our instructions and in accordance with GDPR. Where data is transferred outside the European Economic Area (EEA), Standard Contractual Clauses (SCCs) approved by the European Commission apply.

We will notify you at least 30 days before adding a new sub-processor that processes personal data.

Application hosting

Hetzner Online GmbH, Germany (EU). Hosts the Monti application server. Data physically located within the EU, subject only to EU law.

Database and queue

Aiven Ltd., Finland (EU). Provides managed database and queue infrastructure for background job processing. Data located within the EU.

Payment processing

GoCardless Ltd., UK. Processes Direct Debit mandates and subscription billing. GoCardless is an independent data controller for payment credentials. The UK has an EU adequacy decision.

Transactional email

Maileroo Group Pty Ltd. Sends transactional emails from Monti to you (account verification, reminders, summaries). Servers located within the EU. Standard Contractual Clauses apply for any transfers outside the EEA.

AI inference routing

An AI routing provider, USA. Routes AI inference requests to our model providers. Zero Data Retention is enforced on all requests. Standard Contractual Clauses apply.

AI model providers

Two AI model providers process prompts on our behalf to generate responses. Zero Data Retention is enforced on all requests; your data is not retained or used for training. One provider is EU-based. Standard Contractual Clauses apply for any transfer to the US-based provider.

Version control integration (optional)

GitHub Inc., USA. Used only if you explicitly connect your GitHub account. Monti reads only the commit metadata from repositories you authorise. Standard Contractual Clauses apply.