Subprocessor List

Third-party subprocessors used by Wysor.

Last updated: June 2, 2026

Subprocessor List

We use the following third-party providers to deliver our services.

Last Updated: June 2, 2026

Infrastructure

Provider	Purpose	Location	DPA
Fly.io, Inc.	Hosting	EU	Available on request
Amazon Web Services EMEA SARL	Cloud infrastructure, email delivery	EU + USA*	AWS DPA
RunPod, Inc.	GPU infrastructure	EU	RunPod DPA

AI Providers

Provider	Purpose	Location	DPA
OpenAI, L.L.C.	AI models (GPT)	USA*	OpenAI DPA
Anthropic PBC	AI models (Claude)	EU	AWS DPA
Google LLC	AI models (Gemini), text-to-speech	EU + USA*	Google Cloud DPA
Perplexity AI, Inc.	AI search	USA*	Perplexity DPA
Tavily, Inc.	AI web search	USA*	Available on request
AssemblyAI, Inc.	Speech-to-text	EU	AssemblyAI DPA
Nebius B.V.	AI models (open-weight: Kimi, DeepSeek, GLM, Qwen)	EU + USA*	Nebius DPA

*Transfer safeguards (EU SCCs) in place.

How We Protect Your Data

Every AI provider we work with is bound by a data processing agreement that we enforce. Your data is protected by three commitments:

Your data never trains AI models. No provider uses your prompts, outputs, or any data to train, fine-tune, or improve their models.
Your data is never shared. No provider shares your data with other customers, model developers, or third parties.
Your data is not stored. Anthropic, Google, Perplexity, Tavily, and AssemblyAI operate with zero data retention — your prompts and outputs are processed and immediately discarded. OpenAI's GPT-5.4 and GPT-5.5 run on AWS Bedrock with the same zero data retention. The open-weight models also run with zero data retention: MiniMax on AWS Bedrock, and DeepSeek, GLM, Kimi, and Qwen on Nebius Token Factory. The smaller OpenAI models (GPT-5.4 Mini and GPT-5.4 Nano) run on OpenAI's direct API with data storage disabled; OpenAI may retain that data for up to 30 days solely for safety monitoring, after which it is automatically deleted.

All EU-located providers process your data entirely within EU infrastructure. For providers marked with *, EU Standard Contractual Clauses (SCCs) are in place.

Need More Control?

For organizations with strict data sovereignty requirements, we offer fully dedicated AI infrastructure hosted entirely within the EU — no third-party AI providers involved. Contact us at [email protected].

Analytics & Monitoring

Provider	Purpose	Location	DPA
PostHog Inc.	Analytics & Error monitoring	EU	PostHog DPA
Google LLC	Analytics	USA*	Google DPA

Payments

Provider	Purpose	Location	DPA
Stripe, Inc.	Payments	USA*	Stripe DPA
RevenueCat, Inc.	Mobile subscription management	USA*	RevenueCat DPA

Authentication

Provider	Purpose	Location	DPA
Google LLC	OAuth login	USA*	Google DPA
Microsoft Corporation	OAuth login	USA*	Microsoft DPA

Telephony

Provider	Purpose	Location	DPA
Twilio Ireland Limited	Telephony, voice, phone number provisioning	EU	Twilio DPA

Security

Provider	Purpose	Location	DPA
Cloudflare, Inc.	Bot protection, CAPTCHA	USA*	Cloudflare DPA

Updates

We notify customers before adding new subprocessors. Questions? Contact [email protected].

See also: Privacy Policy | DPA