Sub-processors

Last updated: 30 September 2026

These are the third parties that DIGITAK engages to process customer personal data on our behalf. Each one is bound by a Data Processing Agreement that meets the requirements of GDPR Article 28.

Current sub-processors

ProviderPurposeCountryDPA status
Scaleway SASHosting of the API gateway and status page (compute, network)FranceScaleway standard DPA
OVH SAS (OVHcloud AI Endpoints)Model inference (API content, processed in memory, not retained)FranceOVHcloud standard DPA
Cloudflare, Inc.Hosting and delivery of this website (visitor IP addresses; no API content)United States (EU-US Data Privacy Framework, SCCs)Cloudflare Data Processing Addendum

API content (prompts and completions) is processed only by the hosting and inference providers above, only in the EU, and is never stored. The other sub-processors handle account, billing, and support data only.

Changes to this list

We notify customers by email at least 30 days before adding or replacing a sub-processor. Customers may object on reasonable data-protection grounds during that period, as set out in the DPA. To be notified, email privacy@euravo.co.