Data Processors
Our authorised sub-processors and the data each one handles.
GreenPT BV processes personal data on your behalf as a processor, or as a sub-processor when you use GreenPT for your own customers. We engage the authorised sub-processors below. Each one is bound by data-protection obligations no less protective than our Data Processing Agreement (DPA), including its confidentiality, security and no-training obligations.
Personal data is hosted only in EU data centres in France and Finland, powered by renewable energy. The one exception is the optional US API endpoint, used only for requests you send to it (see the US tab below).
Inference sub-processors
Choose an inference region to see the sub-processors that process your requests. EU is selected by default. Set your API base URL to choose where requests run; this switch only changes the information shown below.
EU endpoint (default): https://api.greenpt.ai/v1
| Sub-processor | Location | Service | Data processed | Safeguards |
|---|---|---|---|---|
| Scaleway SAS | Paris, France (EU) | AI model hosting (GPU) | Prompt content and output during processing | ISO 27001, ISO 50001, HDS; data never leaves the EEA |
| Inceptron | Finland (EU) | AI model hosting | Prompt content and output during processing | EU-hosted; no training on your data |
| Tensorix | Finland (EU) | AI model hosting | Prompt content and output during processing | EU-hosted; no training on your data |
| Melious | Finland (EU) | AI model hosting | Prompt content and output during processing | EU-hosted; no training on your data |
US endpoint: https://api.us.greenpt.ai/v1
| Sub-processor | Location | Service | Data processed | Safeguards |
|---|---|---|---|---|
| Neuralwatt | United States | AI inference for requests sent to the US endpoint only | Request content and generated output | Transfer under a valid Chapter V GDPR mechanism; no training on your data |
Neuralwatt Inc. serves the models offered on our US endpoint. Your prompts
and the generated output pass through Neuralwatt only for requests you send to
https://api.us.greenpt.ai. This sub-processor is not used by any other
GreenPT service: the default endpoint https://api.greenpt.ai, the EU
endpoint https://api.eu.greenpt.ai, GreenPT Apps, GreenPT Chat and
everything else are served from the EU sub-processors. Requests to the EU
endpoints are never routed to the US endpoint.
Sending a request to the US endpoint is your instruction to process it in the United States. We make that transfer subject to a valid transfer mechanism under Chapter V GDPR. Account, billing, email and other platform data stay in the EU whichever endpoint you use. If you do not want requests processed in the US, call the EU endpoints, which is what every client that does not change its base URL already does.
Neuralwatt Inc. is a United States company, and its terms of service are governed by the laws of the State of Delaware, United States. For more information about how Neuralwatt handles your data, please review their Privacy Policy.
See Data Processing Locations for regional infrastructure and Region Inference for endpoint configuration.
Shared service sub-processors
These sub-processors support platform services whichever inference region you use. Choosing US inference does not move account, billing or email processing to the US.
| Sub-processor | Location | Service | Data processed | Safeguards |
|---|---|---|---|---|
| Scaleway SAS (RCS Paris 433 115 904) | Paris, France (EU) | Hosting of the platform, databases, storage and logs; Speech-to-Text | All platform data | ISO 27001, ISO 50001, HDS, Tier III, 100% renewable energy; data never leaves the EEA |
| Mollie B.V. (KvK 30204462) | Amsterdam and other EEA payment-processing locations | Payment acquiring and billing gateway | Name, email address, payment data | Licensed e-money institution (DNB); PCI-DSS Level 1; encryption in transit and at rest |
| Moneybird | Netherlands (EU) | Billing and invoicing (Business and Enterprise accounts) | Billing data, invoice details | EU-hosted; ISO 27001 |
| Cirrux | Netherlands (EU) | Email delivery | Email addresses, correspondence | EU-hosted; encryption in transit and at rest |
Speech-to-Text
Speech-to-Text runs Deepgram models that we host ourselves on Scaleway in Paris, France, which is why the API works with the official Deepgram SDK. Audio is processed in memory, discarded right after transcription, and never leaves the EEA. Deepgram Inc. is not a sub-processor: no audio or transcription is sent to Deepgram.
GreenPT Search
Brave Search is not a sub-processor for data you submit through our services. It powers the search index of our public search site search.greenpt.ai and processes only the search queries entered there. It is not used in the GreenPT API, Speech-to-Text, apps.greenpt.ai or any other GreenPT service, and receives none of their data.
For more information about how Brave handles your data, please review their Privacy Policy.
Changes to this list
Under our DPA we give at least 30 calendar days' written notice before adding or replacing a sub-processor, and update this list the same day. You may object on reasonable data-protection grounds within 28 days of the notice. If we cannot resolve the objection within a further 15 days, you may suspend or terminate the affected services without penalty.
Data Processing Agreement
Business customers can request our standard DPA through the contact form, or tailored terms through the custom DPA request form. See also our Privacy Policy, or contact us at mail@greenpt.ai.