Low-code and visual programming platforms

HM-2 by Hellomatik

AI workflows built on a shared business model

SpainEUEU hosted Ownership reviewed, controller unresolved
Visit website hellomatik.com

Scope verdict

Ownership reviewed, controller unresolved

Spanish incorporation and named administrators are verified, but public evidence does not establish ultimate ownership. HM-2 remains outside our verified European-controlled recommendations.

How we classify services

HM-2 connects business systems and email in a shared model. AI agents use its data and procedures to prepare decisions, reports and recurring work, with automatic execution or human approval.

Hellomatik S.L. is incorporated in Spain. Its product page states that customer databases and backups are hosted in Germany.

Data and operations

Infrastructure and email path

Verified operational dependencies, shown separately from ownership and from the service's core data hosting.

Core service hosting

Undisclosed hosting provider

Provider control not verified
Location
Germany (vendor statement)
Observed
The HM-2 product page states that each customer has a separate database and backup on servers in Germany. It does not identify the hosting vendor or establish every AI inference or sub-processor location.

Public website

Hostinger

Provider control not verified
Observed
A 72.61.177.41 · AS47583; public website network only. Ultimate provider control and application hosting are not established by this route.

Incoming business email

Microsoft 365

Non-European provider
Observed
MX 10 hellomatik-com.mail.protection.outlook.com

Why this matters

Published MX records route incoming business email through Microsoft 365. Correspondent details and message content can therefore enter this non-European provider's systems; MX does not reveal the configured storage region.

Authorised outbound email

Microsoft 365

Non-European provider
Observed
SPF spf.protection.outlook.com; sending authorization, not proof that every message uses Microsoft.

Why this matters

This domain authorises Microsoft 365 to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Supporting services

Undisclosed language-model providers

Provider control not verified
Observed
Hellomatik says model providers are contracted sub-processors and do not train on customer data. The provider list, processing locations and transfer mechanisms are available on request, so EU-only inference is not publicly established.

Supporting services

Calendly

Optional feature or channel

Non-European provider
Observed
Privacy policy section 15 names US-based Calendly for visitor-initiated meeting bookings, including booking and browser data. This is separate from HM-2 business workflows.

Why this matters

The published disclosure lists Calendly for supporting services. Depending on the function, account or customer data may reach this non-European provider. See the source for the documented scope.

Supporting services

Google Analytics / Google Ads

Optional feature or channel

Non-European provider
Observed
Privacy policy section 15 describes consent-based website analytics and advertising. Enhanced conversions send a hashed email address when the enquiry form is submitted with advertising consent; US transfers are possible. This does not establish processing of HM-2 customer databases.

Why this matters

The published disclosure lists Google Analytics / Google Ads for supporting services. Depending on the function, account or customer data may reach this non-European provider. See the source for the documented scope.

Public DNS records identify visible providers and routes, not every backend location or private data-region setting.

Infrastructure checked:

More in Low-code and visual programming platforms

RUAL

Dutch no-code platform for business applications

NetherlandsEU hostedEU controlled

View all →

More from Spain

AnalyzatiPenpot