Last updated: 8 September 2026
To provide the service, Conductiva Online Services, S.L. uses the providers listed below, which act as sub-processors of the personal data you enter into FacturaDirecta, in accordance with clause 7 of the Data Processing Agreement.
This list is kept up to date. Any intended addition or replacement will be published here at least 30 days in advance and, if the change is significant, you will also be notified through the service itself or by email.
Infrastructure and service sub-processors (apply to all accounts)
| Provider | Purpose | Processing location | International transfer |
|---|---|---|---|
| Google Cloud (Google Cloud EMEA Ltd.) | Hosting of the application, databases and encryption of secrets | European Union (Belgium) | No (additional safeguards from the provider for support) |
| Amazon Web Services (AWS EMEA SARL) | Storage of documents and attachments; delivery of the web application | European Union (Ireland) | No (additional safeguards from the provider for support) |
| Mailgun (Sinch Email) | Sending and receiving the service’s email (sending documents, notifications, expense inbox) | European Union (EU region) | No |
| Intercom, Inc. | Support chat and communication with users | United States | Yes — EU–US Data Privacy Framework and standard contractual clauses (Intercom DPA) |
Sub-processors for specific features (only if you use the feature)
| Provider | Feature | Purpose | Processing location | International transfer |
|---|---|---|---|---|
| Abaq Services, S.L. | Automatic scanning | Automatic extraction of data from invoices and receipts | Spain | No |
| OpenAI | Automatic payslip scanning | Automatic extraction of data from employment documents using AI | United States | Yes — standard contractual clauses |
| Anthropic | Automatic payslip scanning | Automatic extraction of data from employment documents using AI | United States | Yes — standard contractual clauses |
| Arcopay (Afterbanks) | Banks | Authorised bank aggregation (PSD2): read-only connection with your banks | Spain | No |
| Unnax Regulatory Services, S.L. | Banks | Authorised bank aggregation (PSD2): read-only connection with your banks | Spain | No |
| Stripe (Stripe Payments Europe, Ltd.) | Online payments | Processing of payments for your invoices from the client portal | European Union (Ireland) / United States | Yes — standard contractual clauses and Data Privacy Framework (Stripe DPA) |
| Google LLC (Google Drive) | Expense inbox with Google Drive | Reading the documents in the Drive folder you link | European Union / United States | Yes — standard contractual clauses and Data Privacy Framework |
| Informa D&B, S.A.U. (eInforma) | Company data | Obtaining a contact’s commercial registry data from its tax ID number | Spain | No |
| Killia Technologies, S.L. (uProc) | Company data | Obtaining a contact’s company data from its tax ID number | Spain | No |
Services you enable yourself
When you connect FacturaDirecta with an external service of your choosing (for example, Zapier, your online shop, your own SMTP email server, the destinations of your webhooks or an artificial intelligence assistant that you connect to your account through the API, such as Claude or ChatGPT), the data is communicated to that service by your decision and under the conditions you have accepted with that provider. These services are not sub-processors of Conductiva.
Recipients under a legal obligation
When you use the tax compliance features, the data is communicated to the competent administrations in their capacity as public controllers, not as sub-processors: the Spanish Tax Agency (AEAT) (VeriFactu, tax ID validation, powers of attorney), the Provincial Councils (Diputaciones Forales) of Gipuzkoa, Bizkaia and Álava (TicketBAI/Batuz), FACe — General Entry Point for Electronic Invoices (invoicing to public administrations) and the European Commission (validation of intra-community VAT numbers, VIES).