Identification of entity: Aibility s.r.o., Drobného 555/49, Ponava, 602 00 Brno, Česká republika, Reg. ID: 10684395.

ENTITIES AS SUB-PROCESSORS ACCORDING TO THE CONCLUDED DATA PROCESSING TERMS

Entity Name	Purpose	Location	Measures for transfer
Google Cloud Platform (Google Cloud EMEA Limited)	Hosting infrastructure (Kubernetes), databases, object storage and caching.	EU (Belgium, europe-west1)	DPA concluded.
Cloudflare, Inc.	DNS, CDN, DDoS protection.	USA	Company is registered under Data Privacy Framework. DPA concluded.
Google Vertex AI / Gemini (via Google Cloud)	LLM processing for generating responses and analyses.	EU	Covered by Google Cloud DPA. If transfer to Google LLC, the company is registered under Data Privacy Framework.
OpenRouter LLC	API gateway for LLM providers, processes conversation content in real time.	USA	Standard Contractual Clauses (SCCs)
OpenAI Ireland Ltd.	Text embeddings and audio transcription (Whisper).	EU	DPA concluded.
Anthropic Ireland, Limited	LLM processing	EU	DPA concluded.
LangSmith (LangChain, Inc.)	LLM observability (tracing/debugging).	USA (EU residency available)	DPA concluded.
Plus Five Five, Inc. (Resend)	Transactional email delivery (magic links, notifications).	USA	DPA concluded; transfers on SCCs.

ENTITIES AS PERSONAL DATA RECIPIENTS ACCORDING TO THE LETTER C OF THE PRIVACY POLICY:

Entity Name	Purpose	Location	Measures for transfer
PAYMENTS AND ACCOUNTING
ABRA Software a.s.	Accounting and invoicing.	CZ/EU	DPA concluded.
Redbit s.r.o. (SimpleShop)	Alternative payment processing for CZ market.	CZ/EU	DPA concluded.
Stripe Payments Europe, Limited	Payment processing	EU	DPA concluded.
COOKIES IN CONNECTION WITH WWW.AIBILITY.CZ
Google LLC + Google Ireland Limited	Analytics and conversion measurement (activated based on cookie consent where applicable). Web fonts.	EU/USA	Google LLC is registered under Data Privacy Framework
Meta Platforms, Inc.	Marketing and conversion tracking (based on cookie consent).	USA	Company is registered under Data Privacy Framework
LinkedIn Ireland Unlimited Company	Marketing and conversion tracking (based on cookie consent).	EU	DPA concluded
Reddit Netherlands B.V.	Marketing and conversion tracking (based on cookie consent).	EU	DPA concluded
PostHog, Inc.	Product analytics (usage events).	USA	Company is registered under Data Privacy Framework
COOKIES IN CONNECTION WITH AIMEE.COACH
Google LLC + Google Ireland Limited	Analytics and conversion measurement (activated based on cookie consent where applicable). Web fonts.	EU/USA	Google LLC is registered under Data Privacy Framework
Meta Platforms, Inc.	Marketing and conversion tracking (based on cookie consent).	USA	Company is registered under Data Privacy Framework
PostHog, Inc.	Product analytics (usage events).	USA	Company is registered under Data Privacy Framework
Hotjar Limited	Session recordings and heatmaps.	EU	DPA concluded.
Mixpanel, Inc.	Product analytics (usage events, hashed email).	USA	Company is registered under Data Privacy Framework.
COMMUNICATION AND SUPPORT
Crisp IM SAS	In-app live chat and customer support.	EU (Netherlands/Germany)	DPA concluded.
Plus Five Five, Inc. (Resend)	Transactional email delivery (magic links, notifications).	USA	DPA concluded; transfers on SCCs.
SENDINBLUE (Brevo)	Newsletter and backup transactional email.	EU	DPA concluded.
CRM
Pipedrive OÜ	CRM (contacts, deals, communication history).	EU (Estonia)	DPA concluded.
Formagrid Inc (Airtable)	Contact database and automation hub.	USA	DPA concluded; transfers on SCCs.
Attio Limited	CRM	EU	DPA to be verified.
Authorization (OAuth)
Microsoft OAuth 2.0	SSO login.	EU	DPA concluded
Google OAuth 2.0	SSO login.	EU/USA	Covered by Google DPA. Google LLC is registered under Data Privacy Framework.