Subprocessors
Last updated: June 16, 2026
McLeuker AI engages the following third-party subprocessors to deliver our Service. We maintain a Data Processing Agreement (DPA) with appropriate safeguards — including the European Commission's Standard Contractual Clauses (SCCs) for transfers outside the EEA — with each subprocessor, or are executing one as part of our compliance program. Where a subprocessor's processing region is being confirmed, this is marked below.
Not all subprocessors process personal data on every request — for example, AI inference and generation providers only receive the content you submit for a given task. Items marked "⚠ to be confirmed" indicate a data-residency commitment we are confirming contractually with the vendor.
Infrastructure & Hosting
| Subprocessor | Purpose | Location | Transfer Mechanism |
|---|---|---|---|
| Vercel Inc. | Frontend hosting, CDN, edge functions | USA (Edge: Global) | SCCs + DPA |
| Railway Corp. (on Google Cloud) | Backend API hosting and compute | USA (GCP us-west) | SCCs + DPA |
| Supabase Inc. | Database, authentication, file storage | USA | SCCs + DPA |
| E2B (FoundryLabs, Inc.) | Isolated code-execution sandbox — runs user-authored code and processes uploaded files during generation | USA | SCCs + DPA |
AI & Machine Learning — Language Models
| Subprocessor | Purpose | Location | Transfer Mechanism |
|---|---|---|---|
| xAI (Grok) | Large language model inference for reasoning and content generation; AI image generation (grok-imagine, image-chain fallback) | USA | SCCs + DPA |
| Google (Gemini / DeepMind) | Large language model inference | USA | SCCs + DPA |
| Moonshot AI (Kimi) | Large language model inference for agentic tasks | USA (entity) | SCCs + DPA |
| OpenAI, L.L.C. | Text embeddings for semantic memory and retrieval over user content | USA | SCCs + DPA |
AI Generation — Image, Video & Voice
| Subprocessor | Purpose | Location | Transfer Mechanism |
|---|---|---|---|
| Alibaba Cloud (Qwen / DashScope) | AI image and video generation | Singapore (no EU adequacy) | DPA + SCCs (Module 2) + Transfer Impact Assessment for the Singapore generation leg |
| Google (Gemini) | AI voice / podcast generation (text-to-speech, primary) | USA (DPF) / EU via Vertex AI (europe-west) | DPA + EU-US Data Privacy Framework |
| OpenAI, L.L.C. | AI voice / podcast generation (text-to-speech, fallback) | USA (DPF) / EU via European Project | DPA + EU-US Data Privacy Framework |
| ByteDance (Seedance / BytePlus) | AI video generation (Seedance) — video only; the Seedream image leg was discontinued | Singapore (no EU adequacy) | DPA + SCCs (Module 2) + Transfer Impact Assessment for the Singapore video leg |
| EvoLink | AI image generation (GPT Image 2 leg + fallback) and video generation (fallback provider) | Global / see vendor DPA | SCCs + DPA |
Search, Retrieval & Rendering
| Subprocessor | Purpose | Location | Transfer Mechanism |
|---|---|---|---|
| Serper | Web search (Google results API) — processes search queries | USA | SCCs + DPA |
| Firecrawl | Web content retrieval and rendering to markdown | USA | SCCs + DPA |
| Exa | Neural web search and retrieval | USA | SCCs + DPA |
| SerpAPI | Structured web search results | USA | SCCs + DPA |
| Browserless | Server-side Chromium rendering (HTML → PDF / screenshots) of generated documents | Global / see vendor DPA | SCCs + DPA |
Payments
| Subprocessor | Purpose | Location | Transfer Mechanism |
|---|---|---|---|
| Stripe, Inc. / Stripe Payments Europe | Payment processing and subscription billing (card data is handled by Stripe; we store only Stripe identifiers) | USA / Ireland (EU) | SCCs + DPA |
Development & Source Control
| Subprocessor | Purpose | Location | Transfer Mechanism |
|---|---|---|---|
| GitHub (Microsoft) | Source code repository and CI/CD | USA | SCCs + DPA |
Change Notifications
We will update this page whenever we add or remove a subprocessor. If you have subscribed to notifications, we will inform you of material changes at least 30 days before they take effect, giving you the opportunity to object. To subscribe to subprocessor change notifications, please contact dpo@mcleuker.com.