This list supplements the SOF AI Privacy Policy. Where SOF AI processes personal data on behalf of a business customer, “subprocessor” refers to those providers that may process personal Customer data in order to perform such processing on behalf of the customer. Payment service providers that act as controllers for their own purposes are listed separately.
1. Subprocessors
| Provider | Purpose | Role | Agreement / Safeguard |
|---|---|---|---|
| IONOS SE Germany | VPS hosting, storage and technical infrastructure | Processor; subprocessor for B2B processing on behalf of customers | Data processing agreement; VPS used: Europe data center region |
| OpenAI Ireland Ltd. Ireland | Generative AI, analysis and API inference | Processor; subprocessor for B2B processing on behalf of customers | OpenAI Data Processing Addendum; international transfers in accordance with the safeguards provided there |
| Anthropic Ireland, Limited Ireland | Claude API for generative AI and analysis | Processor; subprocessor for B2B processing on behalf of customers | Anthropic Data Processing Addendum, incorporated into the Commercial Terms; SCCs where required |
| Google Cloud EMEA Limited Ireland | Gemini API Paid Services for generative AI and analysis | Processor for prompts and responses; to that extent, subprocessor for B2B processing on behalf of customers | Google Data Processing Addendum for products where Google is a processor; certain account, billing and usage data are processed under Google’s controller terms |
| Perplexity AI, Inc. USA | Sonar API for web-assisted research and answers | Processor; subprocessor for B2B processing on behalf of customers | Perplexity Data Processing Addendum including SCCs; for Sonar, Perplexity documents a zero-data-retention policy for prompt/response content |
2. Other Recipients Acting as Independent Controllers
Paddle is not used as a subprocessor for Customer Content. For paid subscriptions, Paddle acts as Merchant of Record and handles in particular payment processing, invoicing, tax calculation, fraud prevention and order processing. Depending on the buyer’s location and the applicable Paddle agreement, Paddle.com Market Limited (United Kingdom) and Paddle.com Inc. (USA) may in particular be involved. For buyer data shared between Paddle and SOF AI, the parties generally act as independent controllers; Paddle’s contractual data-sharing provisions apply in this respect.
3. Changes
This list is updated when providers used in production, their role or the relevant data flows change. Not every SOF AI request is transmitted to every AI or research service listed here; this depends on the function selected, model routing and research mode.