Subprocessors and connected services
The current technical production configuration and the services a customer may choose to connect.
Last updated September 7, 2026.
Current production configuration
The active service runs on a DigitalOcean VPS in Frankfurt, Germany. PostgreSQL runs in the same deployment. Private object storage uses Backblaze B2 EU Central, and transactional email uses Mailgun's EU endpoint.
- DigitalOcean: application hosting, PostgreSQL volume, and networking.
- Backblaze: private recordings, transcripts, and privacy-export archives.
- Mailgun: transactional email delivery.
- OpenAI: transcription, extraction, embeddings, briefings, and explanations.
- Sentry: privacy-limited error and operational monitoring.
- PostHog EU: optional analytics and masked public-page replay after consent.
Paddle acts as merchant of record and independent controller for checkout, payments, tax, invoices, refunds, and subscription administration.
Customer-connected services
A customer may choose to connect Google or Microsoft identity/calendar services; Jira, Linear, or Asana work-management services; or HubSpot, Pipedrive, or Attio sales services. These connections are read-only preparation context and are not enabled merely because ModoPersona supports them.
Changes and safeguards
We provide at least 30 days' notice before a new subprocessor processes customer content. Customers may object on reasonable data-protection grounds. Contact privacy@modopersona.com.
See the Privacy Policy for purposes, retention, international transfers, and rights.