Sub-processors
The authorised third parties that process Customer Personal Data on Grasperly's behalf, with purpose, region, and links to each provider's data-protection terms.
English is the binding text · Polish is provided for convenience
Pursuant to Article 28(2) of Regulation (EU) 2016/679 (GDPR) and clause 4 of the Data Processing Agreement, Grasperly Sp. z o.o. discloses the sub-processors engaged to process Customer Personal Data. We will notify customers of any proposed addition or replacement of a sub-processor at least 30 days before that change takes effect, by email to the customer's designated privacy contact and by an update to this page.
Subscribe to changes. To be notified of new or changed sub-processors, email subprocessors@grasperly.com from the mailbox you would like added.
§ 1Current sub-processors
| Provider | Role | Region |
|---|---|---|
| Amazon Web ServicesAmazon Web Services EMEA SARL (LU) | Cloud hosting · application + database (EU regions only) | Frankfurt (eu-central-1) · Warsaw (eu-central-2)EU |
| AnthropicAnthropic Ireland Limited (IE) | LLM inference · Claude family · Zero Data Retention | EU (Ireland)EU |
| Mistral AIMistral AI SAS (FR) | LLM inference · open-weight backup tier · EU residency | Paris (eu-west-3)EU |
| PlausiblePlausible Insights OÜ (EE) | Website analytics on grasperly.com · cookieless · no personal identifiers | TallinnEU |
| ResendResend Sp. z o.o. (PL) | Transactional email · password resets, invoices, notifications | WarsawEU |
§ 2Model providers — Zero Data Retention
All LLM sub-processors above operate under contractual Zero Data Retention (ZDR): prompts, completions, and tool inputs/outputs are processed in-flight and are not retained or logged for human review by the provider beyond the time strictly necessary to return a response. This commitment is in addition to the no-training commitment in our Terms of Service and in clause 6 of the DPA.
§ 3Version history
- v1.0 · 2026-06-01 — Initial publication. Five sub-processors disclosed.