Trust & transparency

Sub-processors

Hapi provides a virtual apprentice that works inside the software our customers already use. To do that, we rely on a small number of trusted third parties — sub-processors — that may process personal data on our customers' behalf. Each operates within a customer's dedicated, logically isolated environment and is bound by written terms at least as protective as those in our data processing agreement.

No sub-processor uses customer data to train, fine-tune or develop any AI or ML model, and customer data is never shared across customers.

Last updated 16 June 2026 Operated by Hapi AI Ltd · company no. 16639121

Hetzner Online GmbH

Hosting

Hosts each customer's dedicated environment (servers and storage). Infrastructure provider only — no access to, or use of, customer data for any model.

Purpose
Cloud hosting & storage
Location
EEA — Germany & Finland (ISO 27001 certified)
UK transfer safeguard
None required — EEA covered by UK adequacy regulations

Anthropic

AI inference

Large language model inference at runtime (Claude API and Claude Code) for task execution and agent reasoning. No training on inputs or outputs under Anthropic's commercial terms; minimal, time-limited server-side retention.

Purpose
LLM inference at runtime
Location
United States
UK transfer safeguard
UK Extension to the EU–US Data Privacy Framework (DPF-certified) and/or the UK IDTA

Fireworks AI

AI inference

Open-model inference at runtime. Zero data retention by default for open models, with no training on inputs without explicit opt-in. SOC 2 Type II and HIPAA compliant.

Purpose
Open-model inference at runtime
Location
United States
UK transfer safeguard
UK IDTA together with a transfer risk assessment

We give customers at least 30 days' written notice before adding or replacing a sub-processor that processes personal data, so they have the opportunity to object on reasonable data-protection grounds, and we will notify customers of any change to this list. Questions? Email [email protected].