Subprocessors

Effective date: 16 April 2026

A subprocessor is a third party we use to help deliver the Service. Below is the current list, organised by role. We give at least 30 days' notice of new subprocessors by email and by in-app banner, and you may object and terminate if you cannot accept a new subprocessor. See also our Privacy Policy and Terms of Use.

1. Infrastructure and operations

Provider	Purpose	Location	Safeguards
Google Cloud Platform	Hosting, managed database, cache, object storage	EU and US regions	UK IDTA + EU SCCs
Stripe	Payments, billing, invoicing	US / Ireland	EU SCCs, PCI-DSS Level 1
Resend	Transactional email	US	EU SCCs
PostHog	Product analytics	EU (preferred) / US	EU SCCs
Google Tag Manager	Tag and analytics management on the marketing site	US	EU SCCs

2. AI providers (routed on your selection)

Each inference request is sent to exactly one AI provider — the one selected by you or by your workspace settings. We transmit only what is needed to serve the request. Providers below do not train their models on your data by default.

Provider	Purpose	Location	Safeguards
OpenAI	LLM, embeddings, images, audio — on your selection	US	EU SCCs; no training on API data by default
Anthropic	LLM — on your selection	US	EU SCCs; no training on API data by default
Google (Gemini, Imagen, Veo)	LLM, images, video — on your selection	US / EU	EU SCCs; training opt-out enabled
xAI	LLM — on your selection	US	EU SCCs

3. People's Republic of China — opt-in only

PRC-based AI providers are not available by default. Until a workspace-level opt-in control is shipped, they are disabled at the platform level; enablement during the interim period is by written request to support@infery.ai. Enabling them constitutes your explicit consent under Article 49(1)(a) UK/EU GDPR to transfer Inputs and Outputs to China, where Standard Contractual Clauses are not currently available. Risks include the PRC Cybersecurity Law, the Data Security Law, the Personal Information Protection Law, and potential government access to data. Consent may be withdrawn at any time by disabling the providers or contacting us; withdrawal does not recall data already transferred.

Provider	Purpose	Location	Safeguards
Alibaba Cloud (Qwen)	LLM, images, video — opt-in only	People’s Republic of China	Article 49(1)(a) UK/EU GDPR explicit consent
DeepSeek	LLM — opt-in only	People’s Republic of China	Article 49(1)(a) UK/EU GDPR explicit consent

4. Changes

We will notify customers of additions to this list at least 30 days before the new subprocessor processes personal data. You may object in writing to privacy@infery.ai and, if we cannot accommodate your objection, you may terminate in line with our Terms of Use.