Kameleoon

Provides AI-driven experimentation and feature management platform for businesses.

Subprocessors (7)

Processed Jul 23, 2026 · source disclosure ↗

vendor	purpose	evidence
Canny US	User feedback management (feature requests, votes)	“Canny User feedback management (feature requests, votes) US Used to collect and manage product feedback submitted by users. Processes basic user identifiers, customer account information, and feedback content” source
Cloudflare, Inc Global	CDN, TLS termination, DDoS protection, WAF	“Cloudflare CDN, TLS termination, DDoS protection, WAF Global Operates via a global network of Points of Presence (PoPs). End-user requests are automatically routed to the nearest PoP geographically (e.g., EU traffic served from EU PoPs)” source
Gravitee Germany, Finland	API management and authentication	“Gravitee API management and authentication EU (Germany, Finland) Handles token-based access to APIs. Self-hosted on Hetzner.” source
Hetzner Germany, Finland	Cloud infrastructure (processing/hosting EU clients)	“Hetzner Cloud infrastructure (processing/hosting EU clients) EU (Germany, Finland) Used only for clients with EU contract, ISO 27001” source
MixPanel Netherlands	Product analytics	“Mixpanel Product analytics EU (Netherlands) Tracks usage metrics within client-facing applications” source
OpenAI US	AI-based functionality (optional, client-activated)	“OpenAI AI-based functionality (optional, client-activated) US Used to power select AI features. No client data is shared by default. Usage is opt-in and controlled by customers” source
OVHcloud Hillsboro	Cloud infrastructure (processing/hosting US clients)	“OVHcloud Cloud infrastructure (processing/hosting US clients) US (Hillsboro) Used only for clients with US contract, ISO 27001, SOC 2 certified” source

Canny
US

User feedback management (feature requests, votes)

“Canny User feedback management (feature requests, votes) US Used to collect and manage product feedback submitted by users. Processes basic user identifiers, customer account information, and feedback content” source
Cloudflare, Inc
Global

CDN, TLS termination, DDoS protection, WAF

“Cloudflare CDN, TLS termination, DDoS protection, WAF Global Operates via a global network of Points of Presence (PoPs). End-user requests are automatically routed to the nearest PoP geographically (e.g., EU traffic served from EU PoPs)” source
Gravitee
Germany, Finland

API management and authentication

“Gravitee API management and authentication EU (Germany, Finland) Handles token-based access to APIs. Self-hosted on Hetzner.” source
Hetzner
Germany, Finland

Cloud infrastructure (processing/hosting EU clients)

“Hetzner Cloud infrastructure (processing/hosting EU clients) EU (Germany, Finland) Used only for clients with EU contract, ISO 27001” source
MixPanel
Netherlands

Product analytics

“Mixpanel Product analytics EU (Netherlands) Tracks usage metrics within client-facing applications” source
OpenAI
US

AI-based functionality (optional, client-activated)

“OpenAI AI-based functionality (optional, client-activated) US Used to power select AI features. No client data is shared by default. Usage is opt-in and controlled by customers” source
OVHcloud
Hillsboro

Cloud infrastructure (processing/hosting US clients)

“OVHcloud Cloud infrastructure (processing/hosting US clients) US (Hillsboro) Used only for clients with US contract, ISO 27001, SOC 2 certified” source