Sub-processors
Last updated: 2026-05-25
This page lists all sub-processors that Next Interaction OÜ uses to provide the Jutusta service (jutusta.ee). The list forms part of our Privacy Policy and Data Processing Agreement (DPA).
Sub-processors
| Processor | Purpose | Data location | Legal basis |
|---|---|---|---|
| Cloudflare, Inc. | R2 (object storage), D1 (database), Durable Objects — data at rest | EU jurisdiction (locked to EU via Cloudflare's Data Localization setting) | SCC + Cloudflare EU DPA |
| Cloudflare, Inc. | Workers (serverless edge execution) and error logs | Executed at the Cloudflare PoP closest to the user. For our user base (mostly Estonia and the rest of the EU) this means EU PoPs (Tallinn, Helsinki, Stockholm). Error logs are stored in our R2 bucket in the Western Europe region and auto-expire after 30 days. Logs contain only technical error information, not transcription or audio content. | SCC, EU–U.S. Data Privacy Framework |
| Google LLC | OAuth authentication (Google Sign-In) | EU/U.S. | SCC, EU–U.S. Data Privacy Framework |
| Next Interaction OÜ (Estonia) | Running speech recognition and synthesis AI models | Estonia, own hardware | Performance of contract — same controller, not a sub-processor |
Changes to this list
For material changes to this list (e.g., adding a new sub-processor) we notify users at least 30 days in advance via privacy [ät] jutusta [punkt] ee or to the email address associated with the account. If you do not agree with a change, you have the right to terminate your account before the change takes effect.
Contact
For sub-processor questions, write to privacy [ät] jutusta [punkt] ee .