Subprocessors
Last updated: April 2026
Under Article 28 of the GDPR, ozeye must disclose all third parties (“subprocessors”) that process personal data on behalf of our customers. This page lists every subprocessor we use, what they do, where they operate, and the legal basis for the transfer.
We will notify customers of any additions or changes to this list at least 30 days in advance via email and by updating this page. If you have questions, contact privacy@ozeye.ai.
Active subprocessors
| Subprocessor | Purpose | Location | Data processed |
|---|---|---|---|
| Mistral AI | AI model inference | Paris, France 🇫🇷 | Prompt and completion content, routed in real time. ZDR enabled - no retention on Mistral’s side. |
| Scaleway | AI model inference (Generative APIs) | Paris, France 🇫🇷 | Prompt and completion content, routed in real time. |
| OVHcloud | AI model inference (AI Endpoints) | Gravelines, France 🇫🇷 | Prompt and completion content, routed in real time. ZDR by default - only billing metadata retained. |
| Hetzner Online GmbH | Infrastructure hosting (VPS, managed database) | Nuremberg & Falkenstein, Germany 🇩🇪 | All customer account data at rest (email, API keys, usage metadata, credit balance). Encrypted volumes. |
| Mollie B.V. | Payment processing (iDEAL, SEPA, cards) | Amsterdam, Netherlands 🇳🇱 | Billing name, email, country, payment method, transaction amount. ozeye never sees card details. |
EU data residency
Every subprocessor listed above operates entirely within the European Union. No personal data leaves EU jurisdiction, and no Standard Contractual Clauses (SCCs) are required because there are no transfers to third countries. This is by design - we will not add a subprocessor outside the EU/EEA without explicit notice and customer opt-in.
Zero data retention (ZDR)
For AI inference subprocessors (Mistral, Scaleway, OVHcloud), ozeye enforces zero data retention: prompt and completion content passes through the provider in real time and is never stored, cached, or logged by ozeye or the provider. Our audit logs only record metadata: token counts, model used, latency, and cost. See our Privacy Policy for details.
Self-managed components (not subprocessors)
The following are run entirely on ozeye-operated infrastructure at Hetzner and do not constitute separate subprocessors under GDPR, because no third party has access to the data:
- PostgreSQL 17 - primary database, self-hosted on Hetzner
- Ory Kratos - identity and session management, self-hosted on Hetzner (Apache 2.0)
- Bifrost - in-process Go library for provider routing (Apache 2.0, no external service)
Subprocessor change history
- April 2026 - Initial subprocessor list published
Contact
For questions about subprocessors, to request copies of signed DPAs with individual subprocessors, or to object to a specific subprocessor, contact privacy@ozeye.ai.