Subprocessor List
Last updated: 2026-06-15. List subject to change; email notice 30 days before any change (GDPR art. 28).
| Subprocessor | Purpose | Location | Certifications |
|---|---|---|---|
| OpenAI | Primary LLM model (gpt-4.1) for deliberations | USA | — |
| Anthropic | Primary LLM model (claude-opus-4-8) for deliberations | USA | — |
| Primary LLM model (gemini-2.5-pro) for deliberations | USA / EU | — | |
| MoonshotAI / Kimi * | LLM model (kimi-k2.6) for validation on high-risk analyses | CN / EU | — |
| MongoDB Atlas | Analysis data storage (Milan, eu-south-1) | EU (Milano · eu-south-1) | SOC 2, ISO 27001 |
| Railway | Application infrastructure hosting (Frankfurt) | EU (Frankfurt, DE) | — |
| Lemon Squeezy LLC | Merchant of Record — self-serve plan payments | USA | — |
* MoonshotAI / Kimi: used only for deliberations without personal data, activated on high-risk analyses. Data processed in the EU.