Subencargados del tratamiento
Última actualización: 13 de julio de 2026
Cómo leer esta página
Un «subencargado» es un tercero que procesa datos personales en nombre de Transept para prestar el servicio. Cada fila a continuación es uno de esos proveedores. Para cada uno enumeramos: el papel que desempeñan, la región donde procesan los datos, la categoría de datos que reciben, la base legal para compartir esos datos y el DPA vigente.
Los clientes de planes de pago pueden solicitar nuestro Acuerdo de procesamiento de datos en [email protected]; este incorpora los DPA de los proveedores a continuación como una obligación en cascada.
Subencargados actuales
| Provider | Role | Region | Data | Lawful basis | DPA |
|---|---|---|---|---|---|
| Hetzner Online GmbH | Application hosting + Postgres database | Germany (EU) | All account data, documents, translations, glossaries, styleguides | Contract | Signed DPA — Hetzner standard DPA per § 28 GDPR |
| Stripe Payments Europe, Ltd. | Subscription billing + one-time purchases | Ireland (EU) for EU customers; US for non-EU | Billing email, billing country, amount, plan, last-four / brand of card. We never see full card numbers. | Contract | Auto-signed Stripe DPA via dashboard |
| Customer.io | Transactional + marketing email | EU workspace (api-eu.customer.io) | Email, locale, marketing-consent status, send/open/click events for the emails we send you | Contract (transactional) + consent (marketing) | Auto-signed Customer.io DPA via account settings |
| PostHog | Anonymous product analytics + error tracking | EU (eu.i.posthog.com) | Page views, feature usage events, device/browser metadata, exceptions. Only loaded with analytics consent. | Consent | Auto-signed PostHog DPA via organization settings |
| Anthropic, PBC | AI translation (Claude family) | United States | Translation prompts + responses (per request, not retained for training) | Contract (legitimate interest in service delivery) | Anthropic API DPA, SCCs for EU-US transfers |
| OpenAI, LLC | AI translation (GPT family) | United States | Translation prompts + responses (per request, not retained for training) | Contract (legitimate interest in service delivery) | OpenAI API DPA, EU-US Data Privacy Framework + SCCs |
| Google LLC (Vertex AI + Gemini API) | AI translation (Gemini family) | EU regions available for Vertex AI; otherwise US | Translation prompts + responses (per request, not retained for training) | Contract (legitimate interest in service delivery) | Google Cloud DPA + EU-US Data Privacy Framework |
| Groq, Inc. | AI translation (Llama and other open-weight models) | United States | Translation prompts + responses (per request, not retained for training) | Contract (legitimate interest in service delivery) | Groq API DPA |
| OpenRouter, Inc. | AI gateway to additional models | United States | Translation prompts + responses; underlying provider varies | Contract | OpenRouter terms include processor obligations |
| Google LLC (Tag Manager + Google Ads) | Analytics + ad-conversion measurement | United States | Page-view metadata, click events, hashed email for enhanced conversions. Loaded only with consent, gated via Consent Mode v2. | Consent | Google Ads Data Processing Terms |
| Meta Platforms, Inc. | Ad-conversion measurement (Pixel + Conversions API) | United States | Conversion event metadata, hashed email + fbclid for click-to-conversion attribution. Loaded only with marketing consent. | Consent | Meta Business Tools Terms — Limited Data Use enabled for EU traffic |
Cambios
Los cambios sustanciales (nuevo subencargado, cambio de región, adición de una nueva categoría de datos) se anuncian con antelación en esta página y en la Política de privacidad antes de que entren en vigor para el nuevo procesamiento. En el caso de los clientes de pago, también notificamos al contacto principal de la cuenta por correo electrónico cuando se añade un nuevo subencargado.