采购参考✦
子处理者
最后更新：2026年7月13日
如何阅读此页面
“子处理者”是代表 Transept 处理个人数据以提供服务的第三方。以下每一行代表一个此类提供商。对于每一个提供商，我们列出了：他们扮演的角色、他们处理数据的区域、他们接收的数据类别、共享该数据的合法依据以及现有的 DPA（数据处理协议）。
付费套餐客户可以通过 [email protected] 索取我们的数据处理协议——它将以下提供商的 DPA 作为向下传递条款纳入其中。
当前子处理者
| Provider | Role | Region | Data | Lawful basis | DPA |
|---|---|---|---|---|---|
| Hetzner Online GmbH | Application hosting + Postgres database | Simplified Chinesey (EU) | All account data, documents, translations, glossaries, styleguides | Contract | Signed DPA — Hetzner standard DPA per § 28 GDPR |
| Stripe Payments Europe, Ltd. | Subscription billing + one-time purchases | Ireland (EU) for EU customers; US for non-EU | Billing email, billing country, amount, plan, last-four / brand of card. We never see full card numbers. | Contract | Auto-signed Stripe DPA via dashboard |
| Customer.io | Transactional + marketing email | EU workspace (api-eu.customer.io) | Email, locale, marketing-consent status, send/open/click events for the emails we send you | Contract (transactional) + consent (marketing) | Auto-signed Customer.io DPA via account settings |
| PostHog | Anonymous product analytics + error tracking | EU (eu.i.posthog.com) | Page views, feature usage events, device/browser metadata, exceptions. Only loaded with analytics consent. | Consent | Auto-signed PostHog DPA via organization settings |
| Anthropic, PBC | AI translation (Claude family) | United States | Translation prompts + responses (per request, not retained for training) | Contract (legitimate interest in service delivery) | Anthropic API DPA, SCCs for EU-US transfers |
| OpenAI, LLC | AI translation (GPT family) | United States | Translation prompts + responses (per request, not retained for training) | Contract (legitimate interest in service delivery) | OpenAI API DPA, EU-US Data Privacy Framework + SCCs |
| Google LLC (Vertex AI + Gemini API) | AI translation (Gemini family) | EU regions available for Vertex AI; otherwise US | Translation prompts + responses (per request, not retained for training) | Contract (legitimate interest in service delivery) | Google Cloud DPA + EU-US Data Privacy Framework |
| Groq, Inc. | AI translation (Llama and other open-weight models) | United States | Translation prompts + responses (per request, not retained for training) | Contract (legitimate interest in service delivery) | Groq API DPA |
| OpenRouter, Inc. | AI gateway to additional models | United States | Translation prompts + responses; underlying provider varies | Contract | OpenRouter terms include processor obligations |
| Google LLC (Tag Manager + Google Ads) | Analytics + ad-conversion measurement | United States | Page-view metadata, click events, hashed email for enhanced conversions. Loaded only with consent, gated via Consent Mode v2. | Consent | Google Ads Data Processing Terms |
| Meta Platforms, Inc. | Ad-conversion measurement (Pixel + Conversions API) | United States | Conversion event metadata, hashed email + fbclid for click-to-conversion attribution. Loaded only with marketing consent. | Consent | Meta Business Tools Terms — Limited Data Use enabled for EU traffic |
更改
重大更改（新的子处理者、区域更改、添加新数据类别）在对新处理生效之前，会在此页面和隐私政策上提前宣布。对于付费客户，当添加新的子处理者时，我们还会通过电子邮件通知帐户的主要联系人。