Subprocessors
Last updated: 2026-10-12
This page lists the subprocessors engaged by Server Farm OÜ to help deliver our Services.
A subprocessor is a third party we engage to process personal data on behalf of our customers (Controllers) in connection with our Services.
Current subprocessors
| Subprocessor | Legal entity / location | Purpose | Categories of personal data |
|---|---|---|---|
| XF Systems OÜ | Estonia (EEA) | System administration, network operations and managed-services engineering on customer infrastructure | Any personal data placed by the Controller on managed systems; system and authentication logs; administrator-side operational metadata |
| Anthropic | Anthropic Ireland, Limited; processing in the USA under Standard Contractual Clauses | AI-assisted system administration, engaged via XF Systems OÜ | Personal data that appears in system output (logs, configuration) during administration |
| OpenAI | OpenAI Ireland Limited; processing in the USA under Standard Contractual Clauses | AI-assisted system administration, engaged via XF Systems OÜ | Personal data that appears in system output (logs, configuration) during administration |
| Rednet OÜ | Estonia (EEA) | Facility and operations support | Incidental physical proximity to customer hardware; access-control records |
| Redport OÜ | Estonia (EEA) | Facility and operations support | Incidental physical proximity to customer hardware; access-control records |
Anthropic and OpenAI use their own subprocessors, listed at https://www.anthropic.com/subprocessors and https://openai.com/policies/sub-processor-list.
Changes to this list
This page is the primary channel through which Server Farm OÜ informs Controllers about changes to its subprocessors. Any intended addition or replacement is published here at least 30 (thirty) calendar days before it takes effect, giving Controllers the opportunity to object on reasonable grounds related to data protection.
In addition, we will e-mail each affected Controller directly where the intended change involves (a) a subprocessor established outside the EEA, or (b) a material extension of the categories of processing performed by subprocessors.
Controllers who want to be e-mailed about every change to this list can subscribe by writing to info@serverfarm.ee. General questions about this list can be sent to the same address.