Cogniten engages the following subprocessors to provide the Service. They process customer data only on Cogniten's behalf, for the purposes stated below and under written agreements that impose data-protection obligations. This register forms part of the Data Processing Agreement; the Privacy & Data Protection information explains how data is processed.
Subprocessors are listed by category. Customers can request the identity of the subprocessors, their processing locations and further details at info@cogniten.ch.
Register last changed: 27 September 2026.
AI infrastructure provider
- Purpose
- Performs the AI-assisted functions: answering questions and drafting, analysing attachments and financial statements, recognising the text of scans and images (OCR), ranking search results, summarising long chats, web search, calculations and file processing in a temporary execution environment (files may remain there until it expires), and converting document and chat text into search indexes (embeddings).
- Data
- Questions and instructions; necessary conversation context, including client notes and chat summaries; relevant excerpts of authorised documents and chats; attachments and emails submitted with a request; the text of uploaded documents and of chats for search indexing; search queries; technical and system instructions (including the user's and the workspace's name).
- Processing location
- Available on request; may include countries outside Switzerland (see the DPA, section 9).
- Transfer safeguard
- Appropriate safeguards where required (see the DPA, section 9); details on request.
Email delivery
- Purpose
- Sends service emails (account verification, password reset, invitations, notifications about forwarded answers and usage).
- Data
- Name and email address of the recipient; content of service notifications, such as the workspace name, the name of the inviting or forwarding colleague and usage levels (no documents or chat content).
- Processing location
- Available on request; may include countries outside Switzerland (see the DPA, section 9).
- Transfer safeguard
- Appropriate safeguards where required (see the DPA, section 9); details on request.
Changes to subprocessors
Cogniten may add, replace or remove subprocessors and change its infrastructure as the Service evolves. Before a new subprocessor begins processing customer data, Cogniten informs the owners of customer workspaces in advance and, on request, of the identity of the new subprocessor, generally at least 30 days before the change, unless a shorter period is necessary for security, legal or urgent operational reasons. Customers may object on reasonable data-protection grounds as set out in the Data Processing Agreement (section 8).
Other recipients
The following are not subprocessors, but may receive information when the Service is used:
- Websites and search services. When the assistant searches the web or opens a web page, the search query or the page address is sent to the search service or website concerned.
- Email and office software. Organisations that connect an email add-in use their email software under their own agreement with its provider; Cogniten receives the email opened by the user for the request in question.
- Public legal sources. Cogniten retrieves public legislation and publications from official sources; no customer data is sent to them.
Questions about subprocessors: info@cogniten.ch.