Third-party subprocessors used by Wysor.
Last updated: February 22, 2026
We use the following third-party providers to deliver our services.
Last Updated: February 22, 2026
| Provider | Purpose | Location | DPA |
|---|---|---|---|
| Fly.io, Inc. | Hosting | EU | Available on request |
| Amazon Web Services EMEA SARL | Cloud storage, email, AI models (Bedrock) | EU + USA* | AWS DPA |
| Provider | Purpose | Location | DPA |
|---|---|---|---|
| OpenAI, L.L.C. | AI models (GPT) | USA* | OpenAI DPA |
| Anthropic PBC (via AWS Bedrock) | AI models (Claude) | EU | AWS DPA |
| Google LLC (via Vertex AI) | AI models, embeddings, text-to-speech | EU + USA* | Google Cloud DPA |
| Perplexity AI, Inc. | AI search | USA* | Perplexity DPA |
| AssemblyAI, Inc. | Speech-to-text transcription | EU | AssemblyAI DPA |
*Transfer safeguards (EU SCCs) in place.
No AI provider trains on your data. Wysor has data processing agreements (Auftragsverarbeitungsverträge) with each provider that contractually enforce these commitments:
Below are the provider-specific details.
OpenAI models are accessed through OpenAI's enterprise API under a dedicated data processing agreement (DPA). OpenAI commits to: no use of API data for model training, no sharing of your data with third parties, and no use for improving OpenAI services. EU Standard Contractual Clauses (SCCs) are in place for data transfers.
Anthropic Claude models are accessed exclusively through AWS Bedrock within the EU (Frankfurt and other EU regions). All requests are processed entirely within AWS EU infrastructure. AWS Bedrock operates with zero data retention by default: prompts and completions are not stored or logged, and are never used for model training. No data leaves the EU at any point.
All Google models are accessed through Google Cloud Vertex AI with zero data retention. Prompts and completions are not stored or logged and are never used for model training.
EU (Frankfurt, germany-west3) — fully processed and stored within the EU:
USA (global endpoint) — preview models not yet available in EU regions. EU SCCs in place:
USA (global endpoint) — open-source partner models hosted via Vertex AI. EU SCCs in place:
EU regions for preview and partner models will be adopted as soon as they become available.
Text-to-Speech (Cloud TTS API, EU endpoint) — Text is processed via the Google Cloud Text-to-Speech API using the EU regional endpoint (eu-texttospeech.googleapis.com). Google does not log any customer TTS text or audio data. The service is stateless and resourceless — no data is retained after processing.
The Perplexity Sonar API operates with zero data retention by default across all API tiers. API inputs and outputs are not stored and are never used for model training. EU SCCs are in place.
AssemblyAI is used for batch transcription of audio recordings via their EU endpoint (api.eu.assemblyai.com). All audio is processed exclusively within the EU. Audio files and transcription artifacts are deleted immediately after retrieval via the DELETE API. Data on EU servers is not used for model training.
For organizations with strict data sovereignty or regulatory requirements, we offer fully dedicated AI infrastructure hosted entirely within the EU. This eliminates all third-party AI providers — models run on private, secure and isolated European GPU clusters. To learn more, contact us at [email protected].
| Provider | Purpose | Location | DPA |
|---|---|---|---|
| PostHog Inc. | Analytics | EU | PostHog DPA |
| Functional Software Inc. (Sentry) | Error monitoring | EU | Sentry DPA |
| Google LLC | Analytics | USA* | Google DPA |
| Provider | Purpose | Location | DPA |
|---|---|---|---|
| Stripe, Inc. | Payments | USA* | Stripe DPA |
| Provider | Purpose | Location | DPA |
|---|---|---|---|
| Google LLC | OAuth login | USA* | Google DPA |
| Microsoft Corporation | OAuth login | USA* | Microsoft DPA |
| Provider | Purpose | Location | DPA |
|---|---|---|---|
| Twilio Ireland Limited | Telephony, voice, phone number provisioning | EU | Twilio DPA |
| Provider | Purpose | Location | DPA |
|---|---|---|---|
| Cloudflare, Inc. | Bot protection, CAPTCHA | USA* | Cloudflare DPA |
We notify customers before adding new subprocessors. Questions? Contact [email protected].
See also: Privacy Policy | DPA