d1 group, e-business GmbH uses the following subprocessors and infrastructure partners where necessary for Teamwide at teamwide.app. Not every provider processes the same data with every use. AI processing depends on the enabled functions and your configuration.
Board data includes text, notes, images, files, comments, shares and related metadata. Agent data includes instructions, chat histories, responses and board content accessible for tool calls.
Hosting and network
| Provider | Service | Data | Location and data protection |
|---|---|---|---|
| Hetzner Online GmbH Industriestr. 25 91710 Gunzenhausen Germany | Server, network and storage infrastructure for the app, database, files and our self-hosted services. | Account, board, agent, configuration, log and notification data on this infrastructure. | Falkenstein, Germany. Privacy at Hetzner. |
| Cloudflare, Inc. 101 Townsend St San Francisco, CA 94107 USA | DNS, protection against DDoS and misuse, edge network, TLS termination and connection of the web application. | IP addresses, connection, HTTP, security and error data. TLS termination may technically also involve processing transmitted application data. | Worldwide network including the EEA and USA. The Cloudflare Data Processing Agreement contains provisions on international transfers and standard contractual clauses. |
Self-hosted services
The Agent Runner and Firecrawl for web research run on our own servers at Hetzner in Falkenstein, Germany. We host Firecrawl ourselves; we do not use an external Firecrawl cloud service for this function. Retrieving a website establishes connections to the relevant website operator. An agent's subsequent model calls go to the AI provider you have configured.
AI providers with your own key
You supply the API keys yourself and select the provider in the agent or account settings. This also applies to OpenAI models and the OpenAI Agents API. There is no shared Teamwide default key. Without use of the relevant AI function, board content is not transferred to a provider merely because that provider is listed.
Recipients, locations, retention and data protection terms depend on your chosen provider and your contract with them. Intermediary services may involve additional model providers. Before activation, the necessary permissions, contractual arrangements and, where applicable, safeguards for international transfers must be in place.
Teamwide does not pass your content on for AI training. Model requests using your key are governed by the agreements between you and your provider.
Payment processing and fonts
Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin D02 H210, Ireland, processes contact, billing, tax, plan, transaction and payment method data for payments, subscriptions and fraud prevention. Stripe does not receive board content or agent chats for this purpose. Depending on the processing, Stripe acts as an independent controller or processor. Details are governed by the Stripe Privacy Policy and the Stripe Data Processing Agreement. Transfers outside the EEA are possible under these terms.
Fonts are delivered from our own infrastructure. Google Fonts and rsms.me receive no requests when fonts are loaded.
International transfers
Our app, database, files and self-hosted services are located at Hetzner in Falkenstein, Germany. External network, payment and AI services may process data outside the EEA. Depending on the recipient, an applicable adequacy decision, standard contractual clauses and supplementary safeguards apply. Providers commissioned by the customer are also subject to the terms agreed with them. We do not promise exclusively European processing for every Teamwide function.
Changes to subprocessors
We notify customers with a data processing agreement by email at least 30 days before adding or replacing a subprocessor. Within this period, customers may object on substantiated data protection grounds. The procedure is described in the DPA.
Send reasoned objections to [email protected] . We will jointly assess whether a reasonable alternative exists. If the affected service cannot be provided without the provider, the parties may terminate that service in accordance with the contractual provisions.
Distinction from data processing agreements
This page supplements the DPA with the subprocessors and infrastructure partners used. The agreement is concluded when a Workspace subscription is taken out; existing individually concluded agreements continue to take precedence. A signed copy is available on request at [email protected] .