Subprocessors — Iridae

Iridae ApS uses certain subprocessors and infrastructure providers to operate, secure, and support the Iridae service. Capitalized terms used on this page have the meanings given in our Terms of Service and Data Processing Addendum (DPA).

What is a subprocessor? A subprocessor is a third-party processor engaged by Iridae that may access or process Customer Data while delivering the service. Vendors that do not access or process Customer Data are treated as subcontractors, not subprocessors.

Due diligence. Iridae applies a commercially reasonable vendor assessment process focused on security, privacy, confidentiality, and operational reliability before onboarding subprocessors.

Contractual safeguards. Iridae requires subprocessors to meet obligations materially consistent with Iridae’s own processor commitments, including requirements to:

process personal data only under documented instructions communicated by Iridae;
use personnel bound by confidentiality and data protection obligations;
implement and maintain appropriate technical and organizational security measures;
notify Iridae without undue delay of confirmed or suspected security incidents; and
cooperate with Iridae to support lawful requests from controllers, data subjects, and authorities.

This notice is provided for transparency and does not create additional contractual rights. The table below reflects the subprocessors Iridae uses as of the publication date of this page.

Subprocessor	Category	Purpose	Data involved	Entity location	Transfer safeguard
Amazon Web Services	Cloud / Infrastructure	Hosting + compute for inference for our first-party models; storage/networking as needed	Customer Content submitted for inference; limited operational metadata/logs	United States	Data Processing Agreement with Standard Contractual Clauses
Microsoft Azure	Cloud / Infrastructure	Hosting + compute for inference for our first-party models; storage/networking as needed	Customer Content submitted for inference; limited operational metadata/logs	United States	Data Processing Agreement with Standard Contractual Clauses
NVIDIA	Compute / Infrastructure	Hosted compute/inference infrastructure (where used) for first-party model inference	Customer Content submitted for inference; limited operational metadata/logs	United States	Data Processing Agreement with Standard Contractual Clauses
OpenAI	Model provider	Third-party model inference used to generate Outputs (where selected)	Customer Content sent to provider for inference; provider returns Outputs	United States	Data Processing Agreement with Standard Contractual Clauses
Anthropic	Model provider	Third-party model inference used to generate Outputs (where selected)	Customer Content sent to provider for inference; provider returns Outputs	United States	Data Processing Agreement with Standard Contractual Clauses