Subprocessors
⚠ Draft — EU-route architecture, not yet in effect. This page describes the processing chain Prodius is moving to for its EU/Practice tier: audio transcription via Mistral Voxtral (Paris), text processing via Azure OpenAI West Europe, and an EU-hosted gateway. It becomes effective on the EU-route go-live date, once the implementation is live and the required Data Processing Agreements are signed. Until that date the live chain differs. This page is not a representation that the chain below is currently in operation.
Once the EU-route is live, Prodius uses the following subprocessors for the Practice (EU-only) tier. Each operates under a Data Processing Agreement per GDPR Article 28. The current sub-processor list is always available here.
Current Subprocessors
| Subprocessor | Purpose | Data Location | Privacy Policy |
|---|---|---|---|
| Mistral AI (Voxtral) | Speech-to-text transcription (audio). Mistral SAS, an EU (French) entity — no US parent. | France (EU) | Link |
| Azure OpenAI (Microsoft) | AI text cleanup, command processing, and screenshot/vision grounding (text and images, not audio). West Europe deployment within Microsoft's EU Data Boundary. | West Europe (Netherlands) | Link |
| Scaleway (gateway host) | Gateway hosting (API routing, zero data storage). Scaleway SAS, an EU (French) entity. | Paris, France (fr-par) | Link |
| Supabase, Inc. | User authentication and usage quota tracking (no dictation content) | West EU (Ireland, eu-west-1) | Link |
| Sentry (Functional Software, Inc.) | Error monitoring and performance tracing (no audio or transcription text) | Frankfurt, Germany | Link |
| TransIP | Domain, DNS & mailbox host for prodius.ai; outbound SMTP that delivers account & verification (OTP) emails generated by Supabase Auth. No dictation content. | Amsterdam, Netherlands | Link |
Data Flow Overview
Practice (EU-only) tier — audio and text are processed on separate EU providers:
Your Device → Prodius Gateway (Scaleway, Paris — fr-par)
→ audio: Mistral Voxtral (Paris, FR) — speech to text
→ text / screenshot: Azure OpenAI (West Europe, NL) — cleanup, commands, vision
→ Gateway → Your Device
Free and Pro tiers are intended for private use and are not covered by the EU-only guarantee; those tiers are not suitable for client-confidential data. The exact processor list for Free/Pro is confirmed at EU-route go-live.
Key Guarantees (Practice tier, at go-live)
- Zero Data Retention: The Prodius Gateway processes all data in memory. Nothing is written to disk on Prodius infrastructure.
- No Model Training: No AI subprocessor uses customer data for model training. For Azure OpenAI and Mistral this is fixed contractually.
- EU-only for Practice: Audio and text are processed exclusively on EU infrastructure (Mistral Paris; Azure West Europe within the EU Data Boundary).
- Fail-Closed for Practice: If the EU provider is unavailable, Practice requests return an error — they are never routed to a non-EU provider as a fallback.
- DPAs: Data Processing Agreements per GDPR Article 28 are executed with every subprocessor before this chain goes live (see the go-live gate above).
Changes to Subprocessors
We will notify all users at least 30 days before adding or replacing a subprocessor that handles personal data. Notification is sent via email to your account email address.
Right to object (veto). If you object to a new subprocessor on reasonable data-protection grounds, the change does not take effect for you while the objection stands: we look for an alternative, or you may terminate your subscription without penalty before the change takes effect. This is a veto, not a notice-only right.
Not on This List
Lemon Squeezy handles checkout and billing for self-serve (Pro) subscriptions as merchant of record: for that payment data it is an independent data controller, not a subprocessor of Prodius, and it never processes dictation content. See the Privacy Policy, Section 1.4.
Questions
For questions about our subprocessors or data processing, contact privacy@prodius.ai.