AVV-Übersicht
Liste aller Auftragsverarbeiter (Art. 28 DSGVO) und ihres Status. Aktualisiert per .planning/legal/avv-trackers.md.
| Vendor | Verarbeitungs-Typ | Status | Standort | Sub-Processor |
|---|---|---|---|---|
| Hetzner | Infrastructure (Hosting + Object Storage) | draft | Falkenstein/Nürnberg, DE | nein |
| Brevo (Sendinblue) | Email (transactional + marketing) | accepted | Paris, FR (EU) | nein |
| Sistrix | SEO API | deferred | Bonn, DE | nein |
| GlitchTip | Errortracking (self-hosted) | n/a (self-hosted) | Hetzner DE | nein |
| nano-banana | AI Image-Gen via MCP | via Anthropic | via Anthropic, US | ja |
| Anthropic | LLM API | accepted | US (DPA + SCC) | nein |
| OpenAI | LLM API (optional) | deferred | US (DPA available) | nein |
Stand Phase 1 — Production-Status (signed/accepted für alle Vendoren) ist Welle-2-Gate vor Pilot-Reveal.