Subprocessors
Last Updated: August 20, 2026
Summary
- Complete list: Every third party that may process customer data is listed below.
- Change notice: We publish new subprocessors here at least 30 days before they begin processing customer data.
- Your controls: Providers are opt-in per request. A request only reaches the provider you name in the model parameter.
- Zero-Day Retention: With ZDR enabled, Demeterics never stores your prompt or response content — see Data Retention.
1. Infrastructure
Processes all customer data. This is the platform Demeterics runs on.
| Subprocessor | Purpose | Data processed | Location | DPA |
|---|---|---|---|---|
| Google Cloud Platform Google LLC |
Hosting, storage, queueing, logging, key management (App Engine, Cloud Run, BigQuery, Datastore, Cloud Storage, Cloud KMS, Secret Manager, Cloud Tasks) | All account and interaction data | us-central1 (Iowa, USA) | Yes |
2. AI model providers
Receive the prompt content of requests routed to them. A provider only receives a request when you select one of its models. When you supply your own provider key (BYOK), your relationship is directly with that provider under their terms.
| Subprocessor | Purpose | Data processed | Location | DPA |
|---|---|---|---|---|
| OpenAI | LLM, text-to-speech, image generation | Prompt and response content | USA | Yes |
| Anthropic | LLM (Claude) | Prompt and response content | USA | Yes |
| Google AI (Gemini) | LLM | Prompt and response content | USA | Yes (Google Cloud DPA) |
| Groq | LLM inference | Prompt and response content | USA | Yes |
| xAI | LLM (Grok) | Prompt and response content | USA | Terms of service; DPA requested |
| OpenRouter | LLM API aggregation | Prompt and response content | USA | Terms of service |
3. Speech and image providers
Receive only the input for the specific media request you make.
| Subprocessor | Purpose | Data processed | Location | DPA |
|---|---|---|---|---|
| ElevenLabs | Text-to-speech | Text submitted for synthesis | USA | Terms of service |
| Murf | Text-to-speech (voice agent) | Text submitted for synthesis | USA | Terms of service |
| Stability AI | Image generation | Image prompts | USA | Terms of service |
| Leonardo | Image generation | Image prompts | Australia / USA | Terms of service |
4. Business operations
Do not receive prompt or response content.
| Subprocessor | Purpose | Data processed | Location | DPA |
|---|---|---|---|---|
| Stripe | Payment processing and billing | Billing identifiers and transaction metadata. Card details go directly to Stripe and are never seen by Demeterics. | USA | Yes |
| SendGrid Twilio Inc. | Transactional email | Email address, message content | USA | Yes |
| Twilio | SMS and voice notifications | Phone number, message content | USA | Yes |
5. Retrieval and enrichment
Invoked only when you use a feature that calls them.
| Subprocessor | Purpose | Data processed | Location | DPA |
|---|---|---|---|---|
| Jina | Document parsing and web content extraction | URLs and public web content you submit | Germany / EU | Terms of service |
| Tavily | Web search | Search queries you submit | USA | Terms of service; DPA requested |
6. Data residency
All Demeterics infrastructure — every service that stores your data — runs in us-central1 (Iowa, United States). We do not currently offer EU or APAC data residency. Some subprocessors are incorporated outside the United States (Jina AI GmbH in Germany, Leonardo Interactive Pty Ltd in Australia) and may process the specific input you send them in their own regions; we state the country of incorporation above rather than asserting a processing region we have not independently verified. If your organisation requires data to remain in a specific region, contact us before onboarding — we would rather tell you no than promise something we cannot deliver.
7. Change notification
We update this page whenever a subprocessor is added or removed, and we do so at least 30 days before a new subprocessor begins processing customer data. To be notified of changes, email support@demeterics.com and ask to be added to the subprocessor notice list.
8. Questions
For a Data Processing Agreement, subprocessor questions, or a copy of our security package, see the Trust Center or email support@demeterics.com.