Molnify AB
Sub-processors
These are the third parties that process personal data on our behalf when we provide the Molnify service. Customers with a data processing agreement are informed before a new sub-processor starts processing their data, and can object.
Where a customer configures an application to send data to an external service, for example through an HTTP action or through the e-signature function under the customer’s own agreement with that service, the recipient is chosen by the customer and is not a sub-processor of Molnify.
Core service
| Sub-processor | Purpose | Personal data | Location and safeguard |
|---|---|---|---|
| Google Ireland LimitedGoogle Cloud Platform | Hosting, databases, file storage and backups for the Molnify service. | All data processed in the service. | EU (Google Cloud data centres in the EU)No transfer outside the EU/EEA |
| Google LLCFirebase Authentication | Sign-in with Google, Microsoft or email. Not used when users sign in with the customer’s own SAML single sign-on. | Account data: name, email address, profile picture URL, user ID. | United StatesEU-US Data Privacy Framework, with the EU Standard Contractual Clauses as fallback |
| Mailjet SASEmail delivery | Sending service emails from the Molnify service. | Recipient email address and name, email content. | EU (France)No transfer outside the EU/EEA |
| Google (legal entities providing Google Workspace)Google Workspace | Molnify’s own email and documents, used for support and customer communication. | Contact details and correspondence. | EU and United StatesEU-US Data Privacy Framework |
| Anthropic Ireland, Limited (processing by Anthropic PBC)Claude Code | AI-assisted development used by Molnify staff when building and maintaining applications on a customer’s behalf. Commercial terms that do not permit training on customer data. | Application data used in development. | United States and other countries outside the EU/EEAEU Standard Contractual Clauses |
Optional features
These providers process data only when a customer selects the feature, for example an AI model in the App Builder or an AI action. Until then they receive nothing.
| Sub-processor | Purpose | Personal data | Location and safeguard |
|---|---|---|---|
| Google Ireland LimitedGemini on Google Cloud | AI features (App Builder and AI actions), only when the customer selects a Gemini model. | Prompts and responses, App Builder conversations. | EUNo transfer outside the EU/EEA |
| Lyceum Technology Germany GmbHGLM and Kimi models | AI features (App Builder and AI actions), only when the customer selects one of these models. | Prompts and responses, App Builder conversations. | EUNo transfer outside the EU/EEA |
| Anthropic Ireland, Limited (processing by Anthropic PBC)Claude | AI features (App Builder and AI actions), only when the customer selects a Claude model. | Prompts and responses, App Builder conversations. | United States and other countries outside the EU/EEAEU Standard Contractual Clauses |
Get notified about changes
We email you before a new sub-processor starts processing personal data, and when one is replaced. Service messages only, no marketing.
Questions or objections: info@molnify.com. How we handle personal data as a controller is described in our privacy policy.