Last update 31/03/2025
KokooI uses certain third-party sub-processors to assist in providing our services. A sub-processor is a third-party data processor engaged by Kokoon AI who has or potentially will have access to or process customer data. This page provides important information about the sub-processors we use, including their function, location, and compliance status.
We carefully select our sub-processors based on their security, reliability, and compliance with applicable data protection laws, including GDPR. We enter into data processing agreements with each sub-processor to ensure they maintain appropriate technical and organizational measures to protect your data.
Current Sub-processors
Below is a list of third-party sub-processors we currently use to deliver our services. We may update this list from time to time as we add or remove sub-processors.
1. Amazon Web Services (AWS):
1.1 Purpose: Cloud infrastructure provider for hosting our application, databases, and storage.
1.2: Location: EU (Ireland), US
1.3: Data Processed: Customer account data, application data, usage data.
2. Google Cloud Platform:
2.1 Purpose: AI and machine learning infrastructure, data analytics.
2.2: Location: EU (Belgium), US
2.3: Data Processed: Training data, AI model data, analytics data
3. Langchain:
3.1 Purpose: AI framework for building language model applications.
3.2: Location: US
3.3: Data Processed: Prompt data, AI interaction data.
4. Stripe:
4.1 Purpose: Payment processing and subscription management
4.2: Location: EU (Ireland), US
4.3: Data Processed: Payment information, billing details, subscription data
5. PostHog:
5.1 Purpose: Product analytics and user behavior tracking
5.2: Location: EU (Germany), US
5.3: Data Processed: Usage data, feature interaction data, performance metrics
Sub-processor Selection and Due Diligence
Kokoon conducts thorough due diligence when selecting sub-processors to ensure they provide sufficient guarantees to implement appropriate technical and organizational measures that comply with applicable data protection laws. Our selection criteria include:
- Security measures and certifications (e.g., ISO 27001, SOC 2)
- Data protection policies and practices
- Compliance with applicable regulations, including GDPR
- Reputation and reliability in the industry
- Geographic location and data transfer mechanisms
- Business continuity and disaster recovery capabilities
International Data Transfers
Some of our sub-processors may process data outside the European Economic Area (EEA) or the United Kingdom. When transferring personal data to countries that do not have an adequacy decision from the European Commission or UK authorities, we implement appropriate safeguards, such as:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- UK International Data Transfer Agreement (IDTA)
- Binding Corporate Rules (BCRs) where applicable
- Additional technical and organizational measures to ensure an adequate level of protection
Changes to Sub-processors
Kokoon may change its sub-processors from time to time. We will notify customers of any changes to our sub-processors through:
- Email notifications to the designated contact person
- Updates to this Sub-processors page
- Notifications within the Kokoon AI application
Customers will have at least 30 days to object to the addition or replacement of a sub-processor. If a customer reasonably objects to a new sub-processor and we cannot address the objection, the customer may terminate their subscription and receive a pro-rated refund for any prepaid but unused services.
Monitoring & Compliance
Kokoon regularly monitors and reviews the performance and compliance of its sub-processors through:
- Periodic security assessments and audits
- Review of security certifications and attestations
- Monitoring of service level agreements (SLAs)
- Incident response testing and evaluation
If we discover that a sub-processor is not meeting our requirements, we will take appropriate action, which may include requesting remediation measures or terminating our relationship with the sub-processor.
Contact Information
If you have any questions about our sub-processors or data processing practices, please contact our Data Protection Officer:
Kokoon
Email: jack@wearekokoon.com
Address: 28 Brookbank Road SE137BT London
© Kokoon Academy Ltd. All rights reserved.
Subscribe to newsletter
Copyright © 2025. KOKOON. All rights reserved.