Legal
Sub-processors
Last updated:
Hivesco Innovation Software AB (“Hives”) engages the sub-processors listed below to provide the Hives.co service. A sub-processor is a third party that processes personal data contained in customer data on Hives’ behalf, under a written contract that imposes the same data protection obligations that Hives has accepted towards its customers.
This page is the current version of Appendix 2.C to our Personal Data Processing Terms, and the notice channel referred to in section 9.2 of those terms. The date at the top of the page is the date of the latest change.
Current sub-processors
| Sub-processor | Country | Location of processing | Role in the service | Transfer mechanism |
|---|---|---|---|---|
| Google Cloud EMEA Limited | Ireland | Google Cloud region europe-west3 (Frankfurt, Germany) | Hosting, storage, backup and infrastructure for the service. Vertex AI for the Ida AI assistant. | Not applicable. Processing takes place within the EU. |
| Resend, Inc. | United States | United States | Sending of transactional email such as invitations, notifications and sign-in codes. Processes the recipient’s name, email address and the content of the email, retained for up to 30 days. | EU-U.S. Data Privacy Framework and Standard Contractual Clauses |
What each sub-processor processes
Google Cloud hosts the whole service, including the database, file storage and backups, in the Frankfurt region. Customer data does not leave the EU for hosting. The Ida AI assistant runs on Vertex AI in the same region: prompts and the customer data they contain are processed to return the output and are not retained by the model provider or used to train or improve any model.
Resend receives only what is needed to deliver an email: the recipient’s name and address, and the content of the message, for example an invitation to a workspace or a notification that an idea has moved to a new stage. Resend stores email and delivery logs in the United States for up to 30 days.
How we notify changes
We inform customers at least 30 days before a sub-processor is added or replaced. The notice goes by email to every address subscribed on this page and to the contact persons named in the customer’s agreement, and this page is updated on the same day. Customers may object to a change on reasonable data protection grounds within 30 days of the notice, as set out in section 9.3 of the Personal Data Processing Terms.
Change log
- 8 September 2026. Page published. Google Cloud EMEA Limited (hosting, Vertex AI) and Resend, Inc. (transactional email) listed.