curiosity

Trust Center · Subprocessors

Who else processes data, and when

Curiosity is built to pass enterprise security review. Deployment, encryption, permissions and audit controls are documented below.

Made in Germany Built in Munich GDPR Compliant Hosting With customers KI Bundesverband Full member

Your data · your environment

01 / 03

On premises deployments

1 provider

Your records stay in the environment you manage. Studio reports product usage to Mixpanel. Error reports go to Curiosity's own server, not to a third party: their messages are encrypted with a key that stays in your deployment, and they can be switched off.

ProviderPurpose

Mixpanel

Product usage analytics, on EU servers. Identifies each user by name and email address.

02 / 03

Cloud deployments

5 providers

The providers used to run and support the cloud deployments Curiosity hosts. Error reports go to Curiosity's own server.

ProviderPurpose

Hetzner

Hosting for cloud deployments

Cloudflare

Protection against malicious traffic

Stripe

Payment processing

OpenAI

Language model provider, an optional default

Mixpanel

Product usage analytics, on EU servers. Identifies each user by name and email address.

03 / 03

Website only

5 providers

Services used for the public website. They do not touch customer deployments or customer data.

ProviderPurpose

Cloudflare

Protection against malicious traffic

Google Analytics

Web analytics, website only

Mailersend

Transactional email

Mailerlite

Marketing email, optional

HubSpot

Marketing email, optional

Ask for the current register

The authoritative subprocessor register is a document, provided on request, and changes are notified in advance. Treat this page as an orientation to it, not as the register itself. Write to hello@curiosity.ai.

Your data. Your infrastructure.

Talk to us about your requirements