Subprocessors
Prodius uses the following subprocessors to provide our services. Each subprocessor has been vetted for data protection compliance and operates under a Data Processing Agreement (DPA) per GDPR Article 28.
EU-Only Processing for Practice tier: Practice subscribers are exclusively routed through EU-based processors (Azure OpenAI West Europe, Fly.io Amsterdam, Supabase Frankfurt). US-based processors (Groq, OpenAI) are only used for Free and Personal tiers.
Current Subprocessors
| Subprocessor | Purpose | Data Location | Privacy Policy |
|---|---|---|---|
| Azure OpenAI (Microsoft) | Speech-to-text transcription and AI text enhancement for Practice tier subscribers | West Europe (Netherlands) | Link |
| OpenAI, L.L.C. | AI text enhancement (fallback provider) | United States | Link |
| Groq, Inc. | Transcription and AI processing for development and free-tier users | United States | Link |
| Fly.io, Inc. | Gateway hosting (API routing, zero data storage) | Amsterdam, Netherlands | Link |
| Supabase, Inc. | User authentication and usage quota tracking | Frankfurt, Germany | Link |
| TransIP | Transactional email delivery | Amsterdam, Netherlands | Link |
| Sentry (Functional Software, Inc.) | Error monitoring and performance tracing (no audio or transcription text) | Frankfurt, Germany | Link |
Data Flow Overview
For B2B customers (EU-only processing):
Your Device → Prodius Gateway (Fly.io Amsterdam, NL) → Azure OpenAI (West Europe, NL) → Gateway → Your Device
For free-tier and development users:
Your Device → Prodius Gateway (Fly.io Amsterdam, NL) → Groq (US) or OpenAI (US) → Gateway → Your Device
Key Guarantees
- Zero Data Retention: The Prodius Gateway processes all data in memory. Nothing is written to disk.
- No Model Training: None of our AI subprocessors use customer data for model training.
- Fail-Closed for B2B: If Azure OpenAI is unavailable, B2B requests return an error — they never fall back to US-based providers.
- DPAs in Place: Data Processing Agreements per GDPR Article 28 are in place with all subprocessors.
Changes to Subprocessors
We will notify all users at least 30 days before adding new subprocessors that handle personal data. Notification will be sent via email to your account email address.
If you object to a new subprocessor, you may terminate your subscription before the change takes effect.
Questions
For questions about our subprocessors or data processing, contact privacy@prodius.ai.