The sub-processor list names every model route
ChangedA new version of the sub-processor list. The page at /legal/subprocessors is now version 2026-10-10, in English and French. It stays approved.
Every route to a model is listed. Model calls go through Vercel's AI Gateway, which can serve the same model from several providers. Three rows are new: Amazon Web Services (Amazon Bedrock) and Google Cloud (Vertex AI) can serve Anthropic's models, and Microsoft (Azure OpenAI) can serve the OpenAI models used for replies on the lightest engine tier. We do not choose or record which provider serves a given call, except for conversation labeling and starter questions, which only OpenAI serves, pinned to the European Union.
Model regions are stated as they are. Anthropic's row no longer says "European Union or United States": the endpoint is chosen by the Gateway, may be in the United States or elsewhere, and we do not record which. The Gateway calls each model provider with Vercel's credentials, so Vercel is our contracting party for model inference, and the transfer safeguard for every model provider is Vercel's data processing agreement.
Other corrections.
- Parallel, used for web research at onboarding, now has a location: the United States, according to its developer documentation. Its transfer runs under Vercel's agreement, and its documentation states it does not use customer data to train models.
- Linkup's data processing agreement is being put in place.
- WorkOS also covers sessions, API keys and the authorisation of MCP clients, and processes the network address and browser of each active session.
- Upstash lists more of the background jobs it runs, and what those jobs carry, including an agent's configuration and encrypted connector credentials during an evaluation. Conversation content still never goes through it.
- Anthropic also classifies a page of your site in one word when our reader cannot tell what kind of page it is, from its address, title, main heading and description, and up to its first 1,500 characters of text.
- A Shopify store we connect for you at onboarding is listed with the systems you bring, not as a sub-processor.
Resources
