Ultra Guest
Sub-processors
The third parties that process platform data, listed with their location and transfer mechanism. This is the live register; only providers currently switched on are shown. The DPA renders from this same source.
| Sub-processor | Purpose | Location / region | Data categories | Transfer mechanism | Optionality | Notice |
|---|---|---|---|---|---|---|
| Amazon Web Services, Inc. — Amazon Bedrock | AI/LLM inference for the AI concierge, content translation, and grounding (Claude and Titan models). | AWS us-east-1 (United States) | Concierge conversation content, prompt context, and grounding facts (excludes stored payment card numbers). | EU Standard Contractual Clauses (Module Two) + encryption in transit and at rest; prompt-context minimisation. | Required | aws.amazon.com |
| Amazon Web Services, Inc. — Amazon SES | Delivery of transactional and operational hotel-branded guest email. | AWS us-east-1 (United States) | Recipient name, email address, and message content. | EU Standard Contractual Clauses (Module Two) + encryption in transit and at rest. | Required | aws.amazon.com |
| Amazon Web Services, Inc. — EC2 / managed hosting | Hosting of the self-hosted Platform database, application, and identity stack (PostgreSQL + GoTrue run on this infrastructure). | AWS us-east-1 (United States) | All personal-data categories, at rest, within the tenant-isolated Platform database. | EU Standard Contractual Clauses (Module Two) + encryption at rest; strict per-tenant isolation. | Required | aws.amazon.com |
| Open-Meteo (weather data) | Local weather for the in-stay destination guide. | Open-Meteo (EU-based) | Approximate property coordinates only — no guest personal data is sent. | No personal data transferred (property location only). | Optional | open-meteo.com |