Skip to content
Book a call
Legal

Sub-processors and data recipients

TenCrown acts as your data processor. You are the controller. This page lists the other companies that handle your content on our behalf, and other recipients you should know about even where they are not sub-processors in the legal sense.

1. Sub-processors

Amazon Web Services EMEA SARL. Hosts your dedicated environment: servers, disks, document storage, encryption keys, backups and security logs. Runs the AI models through Amazon Bedrock. Handles all content in your workspace.

  • Stored in Dublin (eu-west-1).
  • AI processing in AWS EU Regions. Our AWS policies allow these EU Regions: Ireland, Frankfurt, Paris, Stockholm, Milan and Spain.
  • Each customer has a separate encryption key in AWS Key Management Service.
  • AI prompt logging is switched off.

2. Other recipients

Public search engines, when web search is on. Your admin decides, per role, whether web search is available. The AI writes a search query that can contain fragments of what the user typed. It goes to a search service that runs inside your dedicated environment, which sends it to public search engines. The engines see the query text and the IP address of your environment. If your policy does not allow fragments of prompts to reach public search engines, ask your admin to turn web search off for the relevant roles.

Shared web page fetcher. When the AI opens a public web page from a search result, a shared fetcher run by TenCrown retrieves it. It only sees public addresses and holds no customer data.

3. Changes to this list

We tell you before we add or replace a sub-processor, and you can object. The notice period and process are set out in your data processing agreement.