Legal
Subprocessors.
The companies that handle customer data for us, what each one does, and where. We update this page before anyone new starts.
Who processes data for bynh
Smart features processors only receive data while a workspace has smart features on. Rows marked To confirm are placeholders until the contract is signed.
- Since 30 Sept 2026
- What they do
- Writing and reading assistance for smart features: drafts, summaries, answers with sources, and reading uploaded files.
- Where
- United States
- What reaches them
- Only the workspace content a smart feature needs for the task in hand, and only while the workspace has smart features on.
- Terms
- Zero data retention: nothing is kept after the request. Never used to train models.
- Since 30 Sept 2026
- What they do
- Fast decisions for smart features: sorting, routing and checks, such as how severe a report is or whether a question is on topic.
- Where
- United States
- What reaches them
- Only the short text a decision is about, and only while the workspace has smart features on.
- Terms
- Zero data retention: nothing is kept after the request. Never used to train models.
- Since 1 Oct 2026
- What they do
- Reading a company’s public website during Smart setup, to pre-fill its profile, brand and likely subprocessors for a person to confirm.
- Where
- United States
- What reaches them
- Only the public web address a person typed or confirmed, and the public pages it links to (at most 10 a time), while the workspace has smart features on.
- Terms
- Zero data retention: nothing is kept after the request.
- What they do
- Runs the bynh app and API, and stores workspace data and uploaded files.
- Where
- Germany (Frankfurt)
- What reaches them
- All workspace content, account data and uploaded files, encrypted at rest.
- Terms
- AWS data processing addendum.
- What they do
- Serves bynh.io and the docs, protects traffic and issues certificates for custom domains.
- Where
- Global edge network
- What reaches them
- Request metadata such as IP address and headers, while a request passes through.
- Terms
- Data processing agreement with standard contractual clauses.
- What they do
- Delivers email: sign-in codes, invitations, notifications and status page updates.
- Where
- To confirm
- What reaches them
- Recipient email address and the content of the email.
- Terms
- AWS data processing addendum.
- What they do
- Takes card payments for subscriptions.
- Where
- To confirm
- What reaches them
- Card details (entered directly with Checkout.com), billing name and amount.
- Terms
- PCI DSS v4.0.1 certified; card numbers never reach bynh.
- What they do
- Tells our engineers when something in bynh breaks, and where in the code.
- Where
- United States
- What reaches them
- Error reports: the page or route, the code location, and user and workspace IDs. Never workspace content, email addresses, IP addresses or what you type.
- Terms
- Data processing agreement with standard contractual clauses.
Changes to this list
We add a company here before it starts processing customer data, with the date. If you have a question or an objection, write to dpo@bynh.io.