1. Register purpose
This is the public list of active providers that may process personal data for Preferium AI Edge, Dashboard, preferium.no and preferium.com. A provider is used only for functions actually enabled. Preferium AS manages the chain.
2. Active providers
| Provider | Purpose/data | Main locations/transfer |
|---|---|---|
| Cloudflare, Inc. | Global edge, DNS, security, Turnstile, Workers AI/AI Gateway and technical logs | Global including US; DPF and/or SCC where applicable |
| Supabase, Inc. | Database, authentication and workspace storage | Configured EU region; support/vendor access may transfer under SCC |
| Google LLC/relevant entities | OAuth, Search Console, Analytics, PageSpeed, Knowledge Graph and Gemini measurement | EU/US/global; DPF and/or SCC |
| OpenAI, L.L.C. | Optional ChatGPT citation/visibility measurement | US; DPF and/or SCC |
| Anthropic, PBC | Claude measurement and explicitly selected model calls | US; DPF and/or SCC |
| Perplexity AI, Inc. | Optional citation/visibility measurement | US; DPF and/or SCC |
| Stripe Payments Europe, Ltd./affiliates | Payments, subscriptions and fraud prevention | EU/US/global under Stripe terms |
| Resend, Inc. | Transactional and contact-form email | US/global; SCC |
| DataForSEO contracting entity | Keyword, SERP, backlink and competitor data | EU and documented vendor locations |
| Sentry, Inc. | Data-minimised error/performance monitoring | EU/US; DPF and/or SCC |
| Better Stack, Inc. | Uptime, incidents, status subscription email | EU/US; SCC |
The transfer mechanism depends on the actual entity, certification, contract and transfer assessment. Listing “SCC” or “DPF” does not replace execution of the required instrument.
3. Change process
Customer gives general written authorisation to this register. Preferium gives at least 30 days’ notice before a new/replacement subprocessor begins processing. Customer may make a reasoned data-protection objection within 14 days. We seek a reasonable alternative; if none exists, Customer may terminate the affected Service before the change and receive unused prepaid fees. Emergency changes necessary for security, continuity or law are notified without undue delay.
Notices/questions: post@preferium.no. Historical versions are available on request.
4. Jurisdictions and government access
Primary workspace data may use an EU region, but edge, AI, measurement, email, payment, support and monitoring may process outside the EEA. We do not promise EEA-only processing unless an enforceable Order does.
Subject to law and contract, Preferium/providers challenge disproportionate demands, disclose only what is lawfully required, document requests and notify affected customers where permitted. Encryption, access limits, minimisation and transfer assessments supplement contractual safeguards.