How the register works
Providers are listed by purpose. Only providers needed for a particular job receive its data. These are the authorised services; an account subscription alone does not replace the supplier’s duty to establish the contract, transfer basis and settings before processing. You may request the relevant transfer information at martin@accessibilitypdf.com. Changes follow the DPA notice and objection procedure.
OpenAI
OpenAI Ireland Ltd.; US affiliates and listed subprocessors. Document text, necessary page images and derived output for assessment, assisted remediation and independent review. Business workspace data is excluded from training by default; voluntary sharing must remain off. Processing is not limited to the EEA. Onward transfers are governed by the OpenAI DPA and its applicable adequacy/SCC arrangements. A consumer account is not an equivalent contractual substitute.
Anthropic
Anthropic Ireland, Limited; US affiliates and listed subprocessors. Document excerpts or pages and derived output when Martin uses Claude for assisted remediation or review. Commercial terms and DPA apply. No opt-in to model training, feedback sharing of client documents or the Development Partner Program. US and other provider locations may be involved; the Anthropic DPA provides the relevant onward-transfer safeguards.
Cloudflare — website hosting and private storage
Cloudflare, Inc. provides website request handling through Workers, the D1 database, private R2 object storage, administrative access, domain and DNS services under our Cloudflare account. Files, agreement and order records and technical request data are processed for hosting and security. Storage location restrictions do not imply that all network, support and service processing stays in the EU. The Cloudflare DPA applies, including its relevant transfer safeguards. No exclusively EU-wide processing promise is made.
Resend — Plus Five Five, Inc.
Transactional email: recipient address, order reference, access link and delivery metadata. PDF contents are not attached. The sending domain uses the eu-west-1 region; this does not make all account, support and log processing EU-only. The provider is US-based. Applicable transfer terms are in its DPA. Open and click tracking are disabled for this service.
Google Workspace
Business mailbox for support, legal notices and order correspondence, under the Google Workspace contracting entity in the supplier’s order form. Contact details and messages are processed; send an order reference rather than attaching your PDF. Global processing, including the US, may occur under the Google Cloud Data Processing Addendum and its applicable transfer terms.
Stripe — Stripe Payments Europe, Limited
Payments, billing, tax, refunds and fraud prevention. Stripe receives order identifiers, amounts and checkout details, not document contents. Stripe acts as a processor for some services and as an independent controller for its own legal, financial and fraud-prevention obligations. Global processing may occur under its DPA and privacy notice. It is not a PDF-processing provider.
Local processing
Martin Schrammel AB also processes files on its controlled work equipment in Sweden. It is the contracting supplier, not an additional subprocessor. Local extraction, comparison and validation do not themselves require sending the entire PDF to an AI provider; selected text and page images may be sent for the agreed task.