legal · sub-processors
Sub-processors
This is the complete, current list of companies that may process data on Andorg's behalf. It is deliberately short — the product is built so that request content and provider keys are never stored anywhere, so most vendors never see anything at all. This page is incorporated into our Data Processing Addendum (section 6), which also sets out the notice-and-objection process for any change.
andorg — authorised sub-processors
| sub-processor | role | location |
|---|---|---|
| DigitalOcean | hosting (the server) | EU (Frankfurt) |
| Stripe | payments and tax | EU / US (SCCs) |
| Cloudflare | DNS resolution only | global (no request content) |
| Deep Read GPU host | Deep Read OCR (Max, on demand) — not yet active | vendor and country will be named here, with notice, before activation |
Your AI provider is not a sub-processor of Andorg: you contract with it directly, choose it per request, and it only ever receives the masked request on your own key. Questions or objections: privacy@andorg.com.