Companies / Apaleo / Subprocessors
Apaleo provides an API-first, AI-powered property management platform for the hospitality industry. It serves hotels, apartment brands, chains and groups, independent hotels, and serviced apartments.
Summarized from its homepage on 8 Nov 2026.
Subprocessors of Apaleo
Apaleo declares 20 subprocessors, including AI providers Anthropic, OpenAI.
From the company's own list.Read the source
| Subprocessor | Purpose |
|---|---|
| Apaleo uses Adyen's payment services to process payments on behalf of our customers from customers' guests. For this purpose, we give data regarding the means of payment (credit cards or information about other payment methods such as PayPal, Klarna or other providers) to Adyen N.V. Further. Apaleo ensures that the necessary data protection standards, such as PCI-DSS, are complied with and for this purpose Apaleo is subject to an annual external audit. Customer Success employees have access to the end users and customers personal data. The access is secured by a personal login. | |
| app.Apaleo.com uses Amazon Web Services (AWS) as infrastructure. Thereby, personal data is stored and processed on AWS servers. Apaleo uses large language models (including Anthropic Claude models) hosted by AWS (Amazon Bedrock) in all current and upcoming AI features. These are hosted in the EU and will be processing unredacted personal data of guests and staff of the Customer. AWS is Apaleo's contractual counterparty for these models; the model providers do not receive access to prompts or outputs. Inference is restricted to EU regions . | |
| Apaleo uses Anthropic's Claude applications (Claude Enterprise) as an internal tool for Apaleo personnel, which may come into contact with business contact data and, where necessary for support, Customer Data. Apaleo uses the Anthropic API for the Fluid Dashboards feature, which receives only the user's free-text prompt, property identifier, user role(s), locale, current date and Apaleo's API documentation – no guest, reservation, folio, invoice or payment data (personal data typed into a prompt is also transmitted). Customer Data is processed only to the extent necessary for the relevant function, under business terms that exclude use of Customer Data for model traininig. Processing for Fluid Dashboards takes place within the EEA . All other AI features use Claude models hosted by AWS (Amazon Bedrock) in the EU – see the Amazon Web Services entry. | |
| Apaleo uses Chargebee for subscription billing, invoicing and payment collection from Apaleo's customers (account holders). Chargebee processes business contact, billing address, tax and payment-method data of the Customer and its authorised contacts; no guest data is processed. Listed for transparency: Apaleo acts as controller for this data. | |
| Apaleo uses Cloudflare for DNS, content delivery, web application firewall and DDoS protection of Apaleo web properties and APIs. Requests to proxied Apaleo services pass through Cloudflare's network, so request data, including IP addresses and technical identifiers, and request content in transit are processed. | |
| Contentful GmbH (DE) | Apaleo to use Contentful GmbH for the certification process for software solutions, storing data and information on the status of the relationships with the app solution. |
| Apaleo uses software from Datadog, Inc. to analyze the performance of app.Apaleo.com. For this purpose, personal data is processed to Datadog, Inc. | |
| Apaleo uses Datatrans' payment gateway and PCI proxy services to securely capture, tokenise and forward payment card and payment method data in PCI-DSS-compliant environments when payments are processed on behalf of our customers from customers' guests. | |
| EFSTA – efsta IT Services GmbH (AT) | Apaleo uses the EFSTA fiscalisation service to create fiscal signatures and fiscal data records for receipts and invoices in countries that require certified fiscalisation. Fiscal data and receipt data are encrypted by the EFSTA system and stored in an EU data centre. |
| Fonoa Technologies Limited (IE) | Apaleo uses Fonoa for tax determination, e-invoicing and tax-compliance services in connection with country-specific invoicing requirements. Fonoa processes invoice and transaction data, which may include names, addresses and tax identifiers of guests, bookers and Customers. |
10 more subprocessors
See the full list with purpose, location and first seen date.
Create a free accountWork email, no card. Already have one? Log inQuestions about Apaleo
Certifications
| Standard | What the source says | Checked |
|---|---|---|
| SOC 2Company's statement | “Apaleo exceeds modern standards for data protection including GDPR, PCI, PSD2 and SOC 2 compliance.”The company's own statement. SOC 2 has no public registry; the report itself is shared by the company, usually under NDA. | 13 Nov 2026Source |
We last read its homepage on 13 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean Apaleo lacks it.
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.
See Apaleo's full stack
Every vendor with its source and date, and an alert when Apaleo adds or drops one. The same lookup works for any company.
- Every company and vendor, with its public source
- 100 API calls a month, plus MCP and the Chrome extension
- Work email only. No card, no sales call