Approved for the pilot, 12 Oct 2026. The inventory separates pilot, planned and disabled providers.
Customer data are not currently processed exclusively in the EU. The state of each area follows.
Last changed:
Oracle Cloud
Pilot hosting, database and files
State
Pilot hosting; Stockholm region confirmed by the founder, agreement and backups pending
Location
Oracle Cloud Infrastructure, Stockholm (eu-stockholm-1), EU
Transfer basis
EEA hosting region confirmed by the founder; verify the processing agreement and backup configuration.
Retention
Workspace policy; backups are expected in the same Stockholm region (eu-stockholm-1), with location and lifetime still to be confirmed.
Hetzner
Planned application, database, file and backup hosting
State
Planned; not the current pilot host
Location
Falkenstein, Germany (fsn1), EU; planned configuration, not deployment evidence.
Transfer basis
EEA processing after a processing agreement and deployment verification.
Retention
Workspace policy; backup expiry follows the deletion plan.
Brevo
Transactional messages, subscription confirmations and notifications
State
Selected provider; account exists, credentials and activation are pending
Location
France, EU according to recorded provider documentation.
Transfer basis
EEA processing; verify the processing agreement and account settings before activation.
Retention
Message and log retention must be verified in account settings.
Google Cloud Vertex AI
Analysis and text or images from customer-owned data; market pattern analysis without copying ads
State
not used in the pilot
Location
Not used in the pilot; no customer data processing.
Transfer basis
eu uses EU processing; global requires verified terms and EEA transfer safeguards independently of the customer choice.
Retention
No training and context caching off; abuse logs may remain until an exemption is granted, and a request does not establish zero retention.
Clerk
Identity, sign-in, sessions, email verification, multi-factor authentication and invitations
State
Selected identity provider; Patternward determines local permissions
Location
United States; identity storage is not described as EU-only.
Transfer basis
Confirm the processing agreement and EEA transfer basis for the actual account; adequacy or contractual clauses are not presumed.
Retention
Verified account settings and terms; complete before production activation.
Payment provider
Payments and settlements after an agreement
State
Not selected; existing payment tests do not establish an active service
Location
To be selected and verified.
Transfer basis
Assess the provider and agreement at selection; processing is not authorized.
Retention
To be agreed; accounting documents follow statutory duties after adviser confirmation.
Jev (TypeSafe)
Judgments over public market data; customer data (brand material, drafts, questions and support tickets) only with that workspace’s “Best available model” opt-in.
State
Disabled by default; each use requires its switch, capability and current provider receipt.
Location
Processing location unconfirmed; EU-only workspaces retain local fallback paths.
Transfer basis
Current provider eligibility and processing agreement required; selecting the best available model does not replace an EEA transfer basis.
Retention
No training according to the integration design; zero retention requires a separate enterprise agreement and operator evidence.
fal.ai
Image and video generation from owned brand material. Competitor material never enters generation.
State
Inactive until its key is configured and the operator confirms the terms.
Location
Outside the EU; requires this workspace’s “Best available model” selection.
Transfer basis
Provider admission, processing agreement and EEA transfer basis required.
Retention
Retention, deletion and no-training terms require confirmation per operation; request headers do not replace an agreement.
ElevenLabs
Polish narration with authorized voices and script verification. Competitor material never enters generation.
State
Inactive until its key is configured and the operator confirms the terms.
Location
Outside the EU; requires this workspace’s “Best available model” selection.
Transfer basis
Provider admission, processing agreement and EEA transfer basis required.
Retention
Retention, deletion and no-training terms require confirmation per operation; request headers do not replace an agreement.
MiniMax
Video and narration from owned material after explicit voice selection. Competitor material never enters generation.
State
Inactive until its key is configured and the operator confirms the terms.
Location
Outside the EU; requires this workspace’s “Best available model” selection.
Transfer basis
Provider admission, processing agreement and EEA transfer basis required.
Retention
Retention, deletion and no-training terms require confirmation per operation; request headers do not replace an agreement.
BytePlus ModelArk
Video from owned product photos. Competitor material never enters generation.
State
Inactive until its key is configured and the operator confirms the terms.
Location
Outside the EU; requires this workspace’s “Best available model” selection.
Transfer basis
Provider admission, processing agreement and EEA transfer basis required.
Retention
Retention, deletion and no-training terms require confirmation per operation; request headers do not replace an agreement.
Ayrshare
Optional publication of approved owned brand creatives, post copy and schedules; account identifiers and publication receipts. No competitor data or media.
State
Inactive until provider selection after sandbox acceptance, configuration and key.
Location
Processing region unconfirmed; processing may also take place outside the EU (details below).
Transfer basis
Processing terms and transfer basis required before activation; EU workspaces require separate owner opt-in.
Retention
Provider terms require confirmation; local connections and receipts follow the workspace retention inventory.
OpenAI
AI assisted copy drafting, used only when enabled for your workspace.
State
Disabled until enabled for your workspace; provider admission and consent to processing outside the EU are required.
Location
United States; processing outside the EU.
Transfer basis
Standard contractual clauses (SCCs) in the OpenAI processing agreement; verification for the specific account required before transferring data.
Retention
Disabling response storage (store=false) does not establish zero retention; abuse monitoring logs may contain content for up to 30 days unless zero data retention is confirmed for the account.
PostHog EU
Platform usage analytics, only with consent to optional analytics.
State
Optional analytics; no events are sent without consent.
EEA processing; verify the processing agreement and PostHog Cloud EU project selection for the account.
Retention
Confirm event retention in project settings before activation.
Change history
. Marked Vertex AI as not used in the pilot and listed OpenAI copy drafts for opted-in shops in data location.
. Added OpenAI for optional copy drafting in the US and PostHog EU for analytics with consent.
. Added the inactive posting-provider adapter and EU-workspace consent for transferring owned materials.
. Added Oracle Cloud for the pilot, a separate planned hosting status, AI location choices and pending company particulars.
. The founder confirmed OCI hosting in Stockholm (eu-stockholm-1); same-region backups remain to be confirmed. Added Jev (TypeSafe), public market data and customer data only with that workspace’s opt-in to the best available model.
