Sub-processors
Overview
iDISC Information Technologies, S.L. (“iDISC”), provider of Koesive, uses selected third parties and authorized professionals to help provide translation, localization, artificial-intelligence, machine-translation, optical-character-recognition, payment, and related services. Where a third party processes Customer Personal Data on iDISC’s behalf, it acts as a sub-processor.
Koesive selects one translation or AI provider for each translation request according to the selected service level and project requirements. A customer does not select the provider. Depending on the task, the selected provider may receive full source documents, extracted source text, translation memories, glossaries, and instructions or prompts needed to perform the service.
Customer-provided data is not used by Koesive to train the models used in the Service. Provider-side retention, where applicable, is governed by the professional service terms applicable to iDISC’s account with that provider.
Sub-processor list
| Provider or category | Service | Data that may be processed | Processing location or transfer position |
|---|---|---|---|
| OpenAI | Generative AI and language processing | Full source documents, extracted text, translation memories, glossaries, and instructions or prompts, where selected by Koesive | May involve processing outside the EEA. The applicable contracting entity, locations, retention, and safeguards depend on iDISC’s professional account and current provider terms. |
| Anthropic | Generative AI and language processing | Full source documents, extracted text, translation memories, glossaries, and instructions or prompts, where selected by Koesive | May involve processing outside the EEA. The applicable contracting entity, locations, retention, and safeguards depend on iDISC’s professional account and current provider terms. |
| Google, including Gemini and Google machine-translation services | Generative AI and machine translation | Full source documents, extracted text, translation memories, glossaries, and instructions or prompts, where selected by Koesive | May involve processing outside the EEA. The applicable contracting entity, locations, retention, and safeguards depend on iDISC’s professional account and current provider terms. |
| DeepL | Machine translation | Full source documents, extracted text, translation memories, glossaries, and related instructions, where selected by Koesive | Processing and retention are governed by iDISC’s professional account and current provider terms. |
| Microsoft, through Azure OCR | Optical character recognition and document-text extraction | Documents, images, extracted text, and technical instructions required for OCR | Configured and governed through iDISC’s professional Azure service. Applicable regions and transfer safeguards depend on the deployed service configuration. |
| Stripe | Payment processing, checkout, transaction management, and applicable tax calculation | Customer, billing, tax, payment, transaction, and fraud-prevention data. Stripe does not receive translation content for payment processing. | Processing locations and international-transfer safeguards are governed by the Stripe services and terms applicable to the transaction. |
| Authorized professional linguists, reviewers, and project personnel | Translation, review, quality assurance, project delivery, and support | Customer Content and project information needed to perform the assigned work | Personnel may work inside or outside the EEA. They work within controlled iDISC systems and are bound by confidentiality and data-protection obligations. |
Services operated internally by iDISC
Koesive production infrastructure, databases, file storage, backups, transactional email, support centre, monitoring and error reporting, and authentication are managed by iDISC. iDISC is the Koesive processor, not its own sub-processor. Any third-party infrastructure or software supplier that processes Customer Personal Data on iDISC’s behalf is a sub-processor for that processing and is subject to the DPA and the sub-processor notice process described below.
How provider selection works
- One provider per translation request. Koesive selects the provider based on the service level and project requirements.
- Purpose limitation. Content is shared only as needed to perform the selected processing.
- No Koesive model training. Koesive does not use Customer-provided data to train the models used in the Service.
- Controlled human access. Authorized professionals work within controlled iDISC systems and are contractually bound to confidentiality and data-protection requirements.
International processing
Koesive production data, backups, monitoring data, and customer files are stored in the EEA. Selected technology providers and authorized personnel outside the EEA may process or access Customer Personal Data where needed to deliver the Service. iDISC applies the transfer mechanism and safeguards required by applicable data-protection law, which may include an adequacy decision, the European Commission’s Standard Contractual Clauses, and supplementary measures. Customers may request available information about the applicable transfer mechanism and safeguards at privacy@koesive.com, subject to lawful confidentiality and third-party restrictions.
Changes to this list
iDISC has the Customer’s general authorization to use sub-processors under the Koesive Data Processing Agreement. iDISC will specifically inform Customers in writing, with reasonable prior notice, of intended additions or replacements that will process Customer Personal Data, giving Customers a meaningful opportunity to object before the new sub-processor begins processing. Where an earlier change is reasonably necessary to address an emergency, security incident, service-continuity risk, or legal requirement, iDISC may implement the change sooner and will inform Customers without undue delay.
Customers may object to an intended addition or replacement on reasonable data-protection grounds by contacting privacy@koesive.com. iDISC will consider a timely objection in good faith and seek a reasonable solution. If no solution is available, the parties will address the affected processing under the Agreement and applicable law. No automatic refund right is created.
Contact
Privacy and sub-processor questions: privacy@koesive.com
Contractual questions: legal@koesive.com