This document is published in English only, and the English text is the binding one. We do not translate it because a machine-translated contract can promise something we did not agree to. If any part of it is unclear, write to support@esan.ai and we will explain it in your language.

Sub-processors

Last updated: October 27, 2026

Esan engages the following third-party processors to deliver the Service. Each processor is bound by a written agreement compliant with Article 28 of the EU General Data Protection Regulation (GDPR), including obligations of confidentiality, security and data protection by design.

We notify connected users by email at least 14 days before adding or replacing a sub-processor that processes personal data, so you can object before the change takes effect. Past versions of this list are archived and available on request to support@esan.ai.

Current sub-processors

Transfers outside the EEA rely on the safeguards in each provider's data processing terms, mainly the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

For the payment-card, identity-verification and bank-account data you provide directly to Stripe, Stripe acts as an independent data controller under its own privacy policy (see our Privacy Policy, Section 5).

Notification of changes

To receive proactive notification of changes to this list, ensure that the email address on your Esan account is current. You may also subscribe to changes by writing to support@esan.ai with the subject line "Subscribe to sub-processor updates".

Right to object

If you have a reasonable, well-documented objection to a new sub-processor (e.g. a conflict of interest, a regulatory constraint affecting your industry, or a credible security concern), notify us within the 14-day notice window. We will work in good faith to address the concern, and where it cannot be resolved you may terminate your subscription with a pro-rata refund of any prepaid fees.