/

Companies / Kopexa / Subprocessors

Kopexa subprocessors

kopexa.com

Kopexa provides GRC software for managing information security, risk, incidents, audits, documents, processes, and suppliers. It serves startups, mid-sized companies, enterprises, automotive, financial services, KRITIS, external data protection officers, and private equity & M&A.

Summarized from its homepage on 11 Nov 2026.

Classified asCompliance and riskCybersecurity

Schauenburgerstraße 116, Kiel, Schleswig-Holstein, 24118, DE

The Kopexa homepage

Subprocessors of Kopexa

Kopexa declares 7 subprocessors.

From the company's own list.Read the source
SubprocessorPurposeLocationFirst seen
Cloudflare, Inc.FedRAMP registryPerformance optimization, DDoS protection, TLS termination, security monitoring and global data distribution.Local – processing in the data center nearest to the end user.11 Nov 2026
Google Ireland LimitedProcessing prompts from the agentic AI "Nova" to provide automated content suggestions and compliance assistance. Active only when a customer explicitly enables Nova AI. Without that consent, no transfer takes place from Kopexa's side.EU (Vertex AI pinned to an EU region).11 Nov 2026
Hetzner Online GmbHHosting internal workloads such as logging, metrics and transactional email infrastructure.Germany.11 Nov 2026
Microsoft AzureFedRAMP registryHosting specific workloads (e.g., AI integrations, storage, compute).Germany & EU.11 Nov 2026
OVHcloudHosting application servers, databases and storage of customer data.France & Germany.11 Nov 2026
Plus Five Five, Inc. (Resend)Sending automated platform emails (notifications, invitations, password resets).EU (Germany) & United States.11 Nov 2026
Stripe, Inc.Processing subscriptions, invoicing, fraud prevention and refunds.EU (Ireland) and United States.11 Nov 2026

Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.

See Kopexa's full stack

Every vendor with its source and date, and an alert when Kopexa adds or drops one. The same lookup works for any company.

  • Every company and vendor, with its public source
  • 100 API calls a month, plus MCP and the Chrome extension
  • Work email only. No card, no sales call