SoyChat Sub-Processors List
Last Updated: 11/01/2025 Effective Date: 11/01/2025
What Are Sub-Processors?
Sub-processors are third-party service providers that SoyChat uses to process data on behalf of our Users. Under data protection laws (GDPR, LGPD), we must inform you about all sub-processors that may access or process your data.
Current Sub-Processors
| Sub-Processor | Service Provided | Data Processed | Location | Privacy Policy |
|---|---|---|---|---|
| Groq, Inc. | AI model inference and response generation | Chat messages, document content, user queries | United States | https://groq.com/privacy-policy/ |
| OpenRouter AI | AI model routing and orchestration | Chat messages, document content, user queries | United States | https://openrouter.ai/privacy |
| Google LLC (Gemini) | AI model inference | Chat messages, document content, user queries | United States | https://policies.google.com/privacy |
| Cerebras | AI model inference | Chat messages, document content, user queries | United States | https://cerebras.com/privacy-policy |
| Hetzner | Cloud infrastructure and data hosting | All user data, documents, chat history, backups | Germany | https://www.hetzner.com/legal/privacy-policy |
| Stripe, Inc. | Payment processing | Payment information, billing details, email addresses | United States | https://stripe.com/privacy |
| Fastmail Pty Ltd | Email delivery | Email addresses, email content, delivery metadata | Australia | https://www.fastmail.com/about/privacy/ |
| Bunny.net (BunnyWay d.o.o.) | DNS resolution and nameservers | IP addresses from DNS queries | Slovenia (EU) | https://bunny.net/privacy/ |
Self-Hosted Services
SoyChat self-hosts the following services within our own infrastructure, which means they are not sub-processors:
- Authentication - Self-hosted authentication system
- File storage - Self-hosted storage infrastructure
- Observability & monitoring - Self-hosted monitoring tools
- Customer support - Self-hosted support system
- Analytics - Self-hosted analytics infrastructure
These services operate within SoyChat's controlled infrastructure and do not share data with third parties.
Data Processing Agreements
All sub-processors listed above have executed Data Processing Agreements (DPAs) with SoyChat that:
- Ensure compliance with GDPR, LGPD, and other applicable data protection laws
- Implement appropriate technical and organizational security measures
- Include Standard Contractual Clauses (SCCs) for international data transfers where applicable
- Prohibit further sub-processing without authorization
International Data Transfers
Transfers to the United States
Most of our sub-processors are located in the United States. Data transfers to the US are protected by:
For EU/UK Users:
- Standard Contractual Clauses (SCCs) approved by the European Commission (Decision 2021/914)
- UK International Data Transfer Agreement (IDTA) or UK Addendum to SCCs
- Additional safeguards including encryption, access controls, and contractual protections
For Brazilian Users:
- Contractual guarantees under LGPD Article 33, VIII
- Standard Contractual Clauses (pending approval by ANPD)
- Technical and organizational security measures
For Other Users:
- Appropriate safeguards in accordance with applicable data protection laws
Changes to Sub-Processors
Adding New Sub-Processors
When we add a new sub-processor that will process personal data, we will:
- Update this list within 5 business days of the change
- Notify active users via email at least 30 days before the new sub-processor processes their data (where required by law)
- Provide opportunity to object if you have reasonable grounds relating to data protection
Your Right to Object
If you object to a new sub-processor:
- You must notify us in writing within 14 days of our notification
- We will work with you in good faith to find an alternative solution
- If no solution is possible, you may terminate your account without penalty
How to Object
To object to a new sub-processor, contact us at:
Email: hello@soy.chat
Subject: "Sub-Processor Objection - [Your Company Name]"
Include in your objection:
- Your account details
- Which sub-processor you're objecting to
- Your reasons (relating to data protection)
Removed Sub-Processors
We maintain a history of sub-processors we've stopped using for transparency:
| Sub-Processor | Service | Removed Date | Reason |
|---|---|---|---|
| None yet | - | - | - |
Change Log
| Date | Change | Details |
|---|---|---|
| 11/01/2025 | Initial publication | Sub-processor list published with 5 third-party processors |
Notification Preferences
To ensure you receive notifications about sub-processor changes:
- Keep your account email address up to date
- Check that notifications are enabled in your account settings
- Add hello@soy.chat to your email allowlist to prevent notifications from going to spam
Questions About Sub-Processors?
If you have questions about our sub-processors or data processing practices:
Email: hello@soy.chat
Subject Line: "Sub-Processor Inquiry"
Response Time: Typically 2-3 business days
Common questions we can help with:
- Security measures implemented by sub-processors
- Data retention periods for specific sub-processors
- Alternative sub-processor options
- Specific data flows and processing activities
Related Documents
For more information about how we protect your data:
- Data Processing Agreement: https://soy.chat/dpa
- Privacy Policy: https://soy.chat/privacy
- Terms of Service: https://soy.chat/terms
- Security Practices: https://soy.chat/security
Document Version: 1.0
Last Reviewed: 11/01/2025
Next Review Date: 05/01/2026
Document Owner: SoyChat Legal Team