Zeldoc's Subprocessor List
Zeldoc.ai ApS uses the subprocessors below to deliver the Platform. The Platform is hosted, and AI inference on Zeldoc's own models runs, in the EU/EEA. Customer content (prompts and outputs) is not processed by the subprocessors unless the table says otherwise. This list belongs to the Data Processing Agreement (zeldoc.ai/dpa).
1.Subprocessors
| Subprocessor | Purpose | Data | Location | Transfer mechanism |
|---|---|---|---|---|
| Hetzner Online GmbH | Hosting | Account, operational, security and technical data (databases, logs, backups); not prompts or outputs | Germany | Not applicable (EU/EEA) |
| ScanNet/Zitcom (team.blue) | Colocation of GPU servers | Physical access (access control, surveillance); inference runs in memory with no persistent content storage on the equipment | Denmark | Not applicable (EU/EEA) |
| Tailscale Inc. | Private network between Zeldoc's servers | Network and device metadata; traffic, including AI requests, is end-to-end encrypted and Tailscale cannot read it | Global | SCC 2021/914 |
| DNScale OÜ (Postscale) | Transactional email and contact form | Personal data in emails and the contact form; not prompts | Estonia | Not applicable (EU/EEA) |
| Staan | Web search | Search queries | EU and USA (fallback) | EU: not applicable. US fallback: covered by Staan's data processing agreement |
2.AI model providers
The AI model providers below are independent controllers/processors and not subprocessors in Zeldoc's contract chain, cf. Privacy Policy §5.3 and §6. The Customer selects them via model choice in ZRouter; the contracting party is stated in brackets. Transfers to providers outside the EU/EEA only occur when the Customer actively selects such a model and are governed by SCC 2021/914 + a Transfer Impact Assessment (TIA), cf. Privacy Policy §6. Retention and model training follow each provider's own policies - reference is made to their public policies via the links below.
| Name (contracting party) | Status | Service/purpose | Data categories | Location | Transfer mechanism | Retention |
|---|---|---|---|---|---|---|
| OpenAI | In use | AI inference (frontier models) | Prompts, context for selected calls | USA | SCC 2021/914 + TIA | OpenAI privacy policy / Zero Data Retention documentation |
| Mistral AI | Listed, not in use | AI inference | Prompts, context for selected calls | EU | Not applicable (EU/EEA) | Mistral AI privacy policy |
| Anthropic (Claude) | In use | AI inference (frontier models) | Prompts, context for selected calls | USA | SCC 2021/914 + TIA | Anthropic privacy policy / Zero Data Retention |
| Google (Gemini) | In use | AI inference (frontier models) | Prompts, context for selected calls | USA | SCC 2021/914 + TIA | Google privacy policy |
| Microsoft (Azure AI Foundry) | Listed, not in use | AI inference (frontier models via Azure) | Prompts, context for selected calls | EU or USA (depends on selected region) | SCC 2021/914 + TIA when located outside EU/EEA | Microsoft privacy statement |
| Amazon Web Services (Bedrock) | Listed, not in use | AI inference (frontier models via Bedrock) | Prompts, context for selected calls | EU or USA (depends on selected region) | SCC 2021/914 + TIA when located outside EU/EEA | AWS privacy policy |
| Google (Vertex AI) | Listed, not in use | AI inference (frontier models via Vertex) | Prompts, context for selected calls | EU or USA (depends on selected region) | SCC 2021/914 + TIA when located outside EU/EEA | Google Cloud DPA |
Note: For Microsoft Azure AI Foundry, Amazon Bedrock and Google Vertex AI, the selected deployment region determines where inference is performed (EU or USA); the transfer mechanism follows from the selected region.
The list of available model providers may change over time; the current portfolio is stated in ZControl and Privacy Policy §6.1.
3.Changes
We review this list when providers or the scope of processing change. Changes are published on this page and notified under the terms of the Data Processing Agreement (DPA), Clause 7.3, or the customer agreement.
4.Contact
Questions about the subprocessor list or the Data Processing Agreement (DPA) can be directed to dpo@zeldoc.ai. Zeldoc.ai ApS, CVR no. 46329902, Åboulevarden 69, 8000 Aarhus C, Denmark.