Subprocessors

Who processes data for Half5

These providers process data on our instructions. Data is stored in the EEA; for transfers outside the EEA we use the safeguards of the GDPR. Your personal timeline is encrypted on your device and is not in this list, because none of these providers can read it.

Updated October 12, 2026

Amazon Web Services

Purpose
File storage and sending email (Amazon SES).
Data
Name, email address, email content and files you upload.
Location
EU (Frankfurt)

Stripe

Purpose
Payments for your subscription.
Data
Your organisation's name, email address and address, subscription and payment details. You enter card and bank details directly with Stripe.
Location
May be outside the EEA, including the US

Sentry

Purpose
Error monitoring in the apps and on the server.
Data
Technical error details and device, operating system and app version. No names or email addresses.
Location
May be outside the EEA, including the US

Google (Gemini API)

Purpose
Drafting hour descriptions when you press the AI button, description suggestions when approving and hour-review summaries.
Data
Customer, project, activity, duration and description. With the AI button also program names, window and page titles and git commits from that period. Summaries contain counts only.
Location
May be outside the EEA, including the US

OpenAI

Purpose
Fallback for the same AI features, when Google does not answer.
Data
The same data as Google.
Location
May be outside the EEA, including the US

Anthropic (Claude)

Purpose
The in-app help assistant, part of a paid subscription. Administrators can switch it off.
Data
Your question and the conversation, the screen you are on, your role, app version, language, subscription status, names of administrators, integrations and your own vehicles. No amounts, organisation name or your own name.
Location
May be outside the EEA, including the US