16 vendors. The clause next to the SLA.

Open a row for strengths and lock-in. Model Availability names the tracked models each vendor page lists. A caution mark means the training terms changed in the last thirty days of the index. Who trains on your data compares that clause for all 16 vendors.

Sub-processor roster and change log

AWS Bedrock, Azure AI Foundry, OpenAI, and Anthropic. Each row is a line from the latest captured public list. A date is the day that vendor's change note states, or the first day that exact line appears after an earlier snapshot that already named a roster. The objection deadline adds the notice period quoted below. Anything the source does not state is Not stated.

AWS Bedrock17 named entitiesEarliest snapshot 2026-04-19

Notice period: 30 days. “AWS will update this page at least 30 days before engaging a new sub-processor.” Notice source · Registry page · 5 snapshots, latest 2026-09-24.

AWS Bedrock sub-processors. Objection deadline is the change date plus 30 days when a change date was observed.
Sub-Processor Entity	Function	Hosting Location	Date Added/Modified	Objection Window Deadline	Snapshot Diff
250ok Inc.	Email deliverability metrics	Brazil United Kingdom USA	Not stated	Not stated	Snapshot diff
Email Data Source, Inc.	Email deliverability metrics	Brazil United Kingdom USA	Not stated	Not stated	Snapshot diff
Cequens FZE	A2P messaging	United Arab Emirates United Kingdom USA	Not stated	Not stated	Snapshot diff
Infobip Ltd.	A2P messaging	United Arab Emirates United Kingdom USA	Not stated	Not stated	Snapshot diff
Nexmo Inc. (now Vonage Holdings Corp.)	A2P messaging Phone number validation	United Arab Emirates United Kingdom USA	Not stated	Not stated	Snapshot diff
Route Mobile (UK) Ltd	A2P messaging	United Arab Emirates United Kingdom USA	Not stated	Not stated	Snapshot diff
Sinch Americas Inc.	A2P messaging	United Arab Emirates United Kingdom USA	Not stated	Not stated	Snapshot diff
Tanla Digital Labs FZ-LLC	A2P messaging	United Arab Emirates United Kingdom USA	Not stated	Not stated	Snapshot diff
TeleSign Corporation	A2P messaging Phone number validation	United Arab Emirates United Kingdom USA	Not stated	Not stated	Snapshot diff
Twilio, Inc.	A2P messaging	United Arab Emirates United Kingdom USA	Not stated	Not stated	Snapshot diff
Meta Platforms, Inc.	WhatsApp messaging	USA	Not stated	Not stated	Snapshot diff
Meta Platforms Ireland Ltd.	WhatsApp messaging	USA	Not stated	Not stated	Snapshot diff
Environmental Systems Research Institute, Inc.	Geolocation (maps and points of interest)	Australia Germany USA	Not stated	Not stated	Snapshot diff
Grabtaxi Holdings Pte Ltd	Geolocation (maps and places)	Ireland Japan Singapore USA	Not stated	Not stated	Snapshot diff
HERE North America, LLC	Geolocation (maps and places)	Ireland Japan Singapore USA	Not stated	Not stated	Snapshot diff
Key-Systems GmbH	Domain registration	Germany	Not stated	Not stated	Snapshot diff
Nexmo Inc. (now Vonage Holdings Corp.) Sinch Americas Inc. TeleSign Corporation Twilio, Inc.	A2P messaging	Belgium Germany Ireland Sweden	Not stated	Not stated	Snapshot diff

Azure AI Foundry5 named entitiesEarliest snapshot 2026-05-14

Notice period: six months. “Microsoft publishes the names of any new subprocessors for its online services at least six months in advance of the subprocessor’s authorization to perform services that may involve access to customer data or personal data.” Notice source · Registry page · 7 snapshots, latest 2026-10-26.

Azure AI Foundry sub-processors. Objection deadline is the change date plus six months when a change date was observed.
Sub-Processor Entity	Function	Hosting Location	Date Added/Modified	Objection Window Deadline	Snapshot Diff
Anthropic, PBC	AI model provider	United States	Not stated	Not stated	Snapshot diff
GitHub, Inc.	AI model provider	United States	Not stated	Not stated	Snapshot diff
Fireworks AI, Inc.	Model hosting, inference, and training platform	Canada, Germany, Iceland, Japan, United States	Not stated	Not stated	Snapshot diff
OpenAI OpCo, LLC	AI model provider	Worldwide	Not stated	Not stated	Snapshot diff
SpaceXAI, LLC	AI model provider	Belgium, India, Japan, Saudi Arabia, South Korea, Switzerland, United Arab Emirate, United States	2026-09-10	2027-03-10	Snapshot diff

OpenAI22 named entitiesEarliest snapshot 2026-04-30

Notice period: 30 days. “OpenAI will notify Customer of any changes to the Sub-Processor List via blog post, notification within the Services or other reasonable means, or via email if Customer subscribes to email notifications on the Sub-Processor List site. Customer may object to the use of such additional Sub-processor within 30 days of receiving notice of the change by following the instructions set forth in the Sub-Processor List or by contacting privacy@openai.com.” Notice source · Registry page · 4 snapshots, latest 2026-10-21.

OpenAI sub-processors. Objection deadline is the change date plus 30 days when a change date was observed.
Sub-Processor Entity	Function	Hosting Location	Date Added/Modified	Objection Window Deadline	Snapshot Diff
Cloudflare, Ltd.	Content delivery network provider. Products: APIChatGPT EnterpriseChatGPT EduChatGPT Business	Processing is performed at the data center ⁠ that is closest to the End User.For requests sent to us.api.openai.com or eu.api.openai.com, OpenAI uses Cloudflare Regional Services ⁠ so that TLS termination and HTTPS decryption occur within the selectedprocessing region.	2026-10-21	2026-11-20	Snapshot diff
Cloudflare, Ltd.	Web Hosting. Products: ChatGPT EnterpriseChatGPT EduChatGPT Business	United States	2026-10-21	2026-11-20	Snapshot diff
Microsoft Corporation	Cloud infrastructure. Products: APIChatGPT EnterpriseChatGPT EduChatGPT Business	AustraliaBelgiumBrazilCanadaDenmarkFranceGermanyIndiaIndonesiaIrelandItalyJapanMalaysiaMexicoNetherlandsNew ZealandNorwayPolandSingaporeSouth AfricaSouth KoreaSpainSwedenSwitzerlandUnited Arab EmiratesUnited KingdomUnited States	2026-10-21	2026-11-20	Snapshot diff
CoreWeave, Inc.	Cloud infrastructure. Products: APIChatGPT EnterpriseChatGPT EduChatGPT Business	NorwaySpainSwedenUnited KingdomUnited States	Not stated	Not stated	Snapshot diff
Oracle Cloud Infrastructure	Cloud infrastructure. Products: APIChatGPT EnterpriseChatGPT EduChatGPT Business	BrazilJapanMalaysiaNetherlandsUnited KingdomUnited States	Not stated	Not stated	Snapshot diff
Google Cloud Platform	Cloud infrastructure. Products: APIChatGPT EnterpriseChatGPT EduChatGPT Business	FinlandJapanNetherlandsNorwaySingaporeUnited KingdomUnited States	2026-10-21	2026-11-20	Snapshot diff
Amazon Web Services, Inc.	Cloud infrastructure. Products: APIChatGPT EnterpriseChatGPT EduChatGPT Business	United States	Not stated	Not stated	Snapshot diff
Cerebras	Cloud infrastructure. Products: APIChatGPT EnterpriseChatGPT EduChatGPT Business	United StatesCanada	Not stated	Not stated	Snapshot diff
Snowflake, Inc.	Data warehousing. Products: API*ChatGPT EnterpriseChatGPT EduChatGPT Business	United States	2026-07-08	2026-08-07	Snapshot diff
TaskUs, LLC	All Services:Customer supportAPI & ChatGPT Business:Moderation of contentChatGPT Enterprise, Edu & ChatGPT Business: Moderation of GPTs. Products: APIChatGPT EnterpriseChatGPT EduChatGPT Business	Philippines	2026-07-08	2026-08-07	Snapshot diff
Salesforce	Customer support. Products: APIChatGPT EnterpriseChatGPT EduChatGPT Business	AustraliaBrazilCanadaFranceGermanyIndiaIndonesiaIrelandItalyJapanSingaporeSouth AfricaSouth KoreaSwedenSwitzerlandThe NetherlandsUnited Arab EmiratesUnited KingdomUnited States	Not stated	Not stated	Snapshot diff
Pylon Labs	Customer support***. Products: APIChatGPT EnterpriseChatGPT Edu	United States	Not stated	Not stated	Snapshot diff
Accenture International Limited	Customer supportAPI & ChatGPT Business:Moderation of content. Products: APIChatGPT EnterpriseChatGPT EduChatGPT Business	United StatesCanadaPhilippines	2026-07-08	2026-08-07	Snapshot diff
Fivetran, Inc.	ETL provider. Products: APIChatGPT EnterpriseChatGPT EduChatGPT Business	United States	2026-10-21	2026-11-20	Snapshot diff
Cinder Technologies, Inc.	API & ChatGPT Business:Platform for content moderationChatGPT Enterprise, Edu & ChatGPT Business:Platform for moderation of GPTs. Products: API*ChatGPT EnterpriseChatGPT EduChatGPT Business	United States	Not stated	Not stated	Snapshot diff
WorkOS, Inc.**	Cross-domain identity management. Products: ChatGPT EnterpriseChatGPT EduChatGPT Business	United States	Not stated	Not stated	Snapshot diff
Merge API, Inc.**	Infrastructure management. Products: ChatGPT EnterpriseChatGPT EduChatGPT Business	AustraliaCanadaFranceIndiaIrelandJapanSingaporeSouth KoreaSwedenUnited KingdomUnited States	Not stated	Not stated	Snapshot diff
OpenAI, OpCo, LLC	OpenAI Global, LLC. Products: APIChatGPT EnterpriseChatGPT EduChatGPT Business	United States	Not stated	Not stated	Snapshot diff
OAI International, Inc.	OpenAI, OpCo, LLC. Products: APIChatGPT EnterpriseChatGPT EduChatGPT Business	United States	2026-10-21	2026-11-20	Snapshot diff
OpenAI Ireland Ltd.	OAI International, Inc.. Products: APIChatGPT EnterpriseChatGPT EduChatGPT Business	Ireland	2026-10-21	2026-11-20	Snapshot diff
OpenAI UK Ltd.	OAI International, Inc.. Products: APIChatGPT EnterpriseChatGPT EduChatGPT Business	United Kingdom	2026-10-21	2026-11-20	Snapshot diff
OpenAI Japan Ltd.	OAI International, Inc.. Products: APIChatGPT EnterpriseChatGPT EduChatGPT Business	Japan	2026-10-21	2026-11-20	Snapshot diff

Anthropic22 named entitiesEarliest snapshot 2026-10-26

Notice period: 15 days. “Anthropic will provide Customer reasonable notice of the new Subprocessor prior to giving the Subprocessor access to Customer Personal Data. Customer may object to Anthropic’s use of such Subprocessor by providing Anthropic with written notice of the objection within fifteen (15) days of the date of such notice, or Customer is deemed to consent to the new Subprocessor.” Notice source · Registry page · 1 snapshots, latest 2026-10-26.

Anthropic sub-processors. Objection deadline is the change date plus 15 days when a change date was observed.
Sub-Processor Entity	Function	Hosting Location	Date Added/Modified	Objection Window Deadline	Snapshot Diff
Google Cloud Platform	Cloud infrastructure	Worldwide	Not stated	Not stated	Snapshot diff
Amazon Web Services	Cloud Infrastructure	Worldwide	Not stated	Not stated	Snapshot diff
Microsoft Azure	Cloud Infrastructure	Worldwide	2026-03-26	2026-04-10	Snapshot diff
Cloudflare	Traffic Routing (CDN)	Worldwide (Local to Customer)	Not stated	Not stated	Snapshot diff
Stripe	Billing	United States	Not stated	Not stated	Snapshot diff
WorkOS	Security, Single Sign-On	United States	Not stated	Not stated	Snapshot diff
Intercom	User support	United States	Not stated	Not stated	Snapshot diff
Nutun	User support	South Africa	2026-03-26	2026-04-10	Snapshot diff
Boldr	User support	Canada	2026-03-26	2026-04-10	Snapshot diff
Twilio	Analytics, email/SMS communications	United States	Not stated	Not stated	Snapshot diff
Iterable	Email communications	United States	2025-09-18	2025-10-03	Snapshot diff
Functional Software, dba Sentry	Error Handling, User Support	United States	Not stated	Not stated	Snapshot diff
Sift	Fraud and abuse detection	United States	Not stated	Not stated	Snapshot diff
Arkose Labs	Fraud and abuse detection	United States	2025-09-18	2025-10-03	Snapshot diff
Brave Search	Web Search	United States	2025-03-19	2025-04-03	Snapshot diff
ElevenLabs	Text to speech	United States	2025-05-29	2025-06-13	Snapshot diff
Palantir Federal Cloud Service (PFCS)	FedRAMP Cloud	United States	2025-09-03	2025-09-18	Snapshot diff
TurboPuffer	Web Search	United States	2026-05-06	2026-05-21	Snapshot diff
Persona	Fraud and abuse detection, identity verification	United States	Not stated	Not stated	Snapshot diff
Yoti	Fraud and abuse detection, identity verification	United Kingdom	Not stated	Not stated	Snapshot diff
Intuition Machines, Inc. (hCaptcha)	Fraud and abuse detection	Worldwide	2026-10-14	2026-10-29	Snapshot diff
Parallel Web Systems, Inc.	Web Search	United States	2026-10-14	2026-10-29	Snapshot diff

Index accurately reflects market data as of 26 Oct 2026.

Next refresh Mon 2 Nov at 4:00 AM PT.

Terms & SLAs Sub-Processors Model Availability

This week

Tracking starts with the first scheduled refresh. Monitoring fourth-party compute, storage, and support sub-processor changes across all sixteen indexed platforms.

No changes (30d)Published sub-processor list has remained unchanged over the last thirty days of the index.
Updated < 30dVendor added, removed, or modified a sub-processor within the last thirty days (standard contractual objection window).

Sub-processor scope, thirty-day diff, notice clause, and the official registry for each indexed platform.
Vendor	Core sub-processor scope	30-day diff status	Notice & objection clause	Official sub-processor registry
Cloud & Data AI Platforms
AWS Bedrock	The page lists four types: AWS infrastructure entities, AWS entities that support specific services, third parties contracted for specific services, and entities that support the AWS European Sovereign Cloud. Bedrock-specific third-party compute hosts: Not published. Section 3 names email, messaging, location, and domain-registration providers. The page says relevance depends on the Region and the services the customer uses.	Baseline captured 21 Oct 2026	AWS will update this page at least 30 days before engaging a new sub-processor. aws.amazon.comChecked 21 Oct 2026	aws.amazon.comChecked 21 Oct 2026
Azure AI Foundry	The data-access page links the Microsoft Online Services Subprocessor List. The PDF dated 10 September 2026, section 3, names five artificial intelligence subprocessors. The applicable product on each row is Microsoft Online Services. The PDF does not name Azure OpenAI or Azure AI Foundry.	Baseline captured 26 Oct 2026	Microsoft publishes the names of any new subprocessors for its online services at least six months in advance of the subprocessor’s authorization to perform services that may involve access to customer data or personal data. microsoft.comChecked 26 Oct 2026	api.servicetrust.microsoft.comChecked 26 Oct 2026
Google Cloud Vertex AI	Affiliate activities on the subprocessors page include Data Center Operations. Named examples include Google LLC, Global Infrastructure UK Limited, Citrine Computing GmbH, Charter Investments Limited, and Quartz Computing Co., Ltd. Accenture International Limited is listed for Technical Support and Assured Support (US, Israel, and EU - Romania) for all Google Cloud Platform Services. Other third-party activities named on the page include Technical Support, Data Labeling, Voice Transcription, and Managing Hosting Environment. A full third-party roster beyond Accenture: Not published in this snapshot.	Baseline captured 21 Oct 2026	When Google engages any New Subprocessor during the Term, Google will, at least 30 days before the New Subprocessor starts processing any Customer Data, notify Customer of the engagement (including the name, location and activities of the New Subprocessor). Customer may, within 90 days after being notified of the engagement of a New Subprocessor, object by immediately terminating the applicable Agreement for convenience. cloud.google.comChecked 21 Oct 2026	cloud.google.comChecked 21 Oct 2026
Databricks (Mosaic AI)	Cloud service providers named on the page: Amazon Web Services, Inc.; Google LLC; Microsoft Corporation; Oracle Corporation. AI-backed services: Anthropic, PBC; OpenAI, L.L.C. Support entities: Twilio Inc.; Atlassian Pty Ltd.; Microsoft Corporation for Teams; salesforce.com, inc.; Slack Technologies, Inc.; SupportLogic, Inc. Affiliates may provide technical and operational support. The purpose cell is filled for Databricks Federal LLC. The other affiliate rows name the entity and country.	Baseline captured 21 Oct 2026	Not published databricks.comChecked 21 Oct 2026	databricks.comChecked 21 Oct 2026
Snowflake (Cortex AI)	Amazon Web Services is listed for cloud hosting, the Snowflake Data Clean Rooms Web App, native app security scanning for Google Cloud Platform-region accounts, and cross-region inference of Cortex for Google Cloud Platform and Microsoft Azure regions. Microsoft Azure is listed for cloud hosting and for cross-region inference of Cortex for Google Cloud Platform and Amazon Web Services regions. Google Cloud Platform is listed for cloud hosting and for cross-region inference of Cortex for Microsoft Azure and Amazon Web Services regions. Cloudflare is listed for R2 cloud storage for the Egress Cost Optimizer. Affiliate technical services and support: Not published as a complete roster in this snapshot.	Baseline captured 21 Oct 2026	Snowflake shall provide such notification at least fourteen (14) days in advance of allowing the new Sub-processor to Process Customer Personal Data (the “Objection Period”). During the Objection Period, Customer may object in writing to Snowflake’s appointment of the new Sub-processor, provided that such objection is based on reasonable grounds relating to data protection. snowflake.comChecked 21 Oct 2026	snowflake.comChecked 21 Oct 2026
Direct Frontier Model APIs
OpenAI (API & Enterprise)	API cloud infrastructure named on the list: Microsoft Corporation; CoreWeave, Inc.; Oracle Cloud Infrastructure; Google Cloud Platform; Amazon Web Services, Inc.; Cerebras. Cloudflare, Ltd. is the content delivery network for the API, including Regional Services for us.api.openai.com and eu.api.openai.com. A separate Cloudflare web-hosting row covers ChatGPT Enterprise, Edu, and Business only. API support or moderation rows: TaskUs, LLC; Salesforce; Accenture International Limited; Cinder Technologies, Inc. (API except where Zero Data Retention is used); Pylon Labs for premium support at the customer’s election. Snowflake, Inc. is listed for data warehousing on the API except where Zero Data Retention is used. Fivetran, Inc. is the ETL provider.	Baseline captured 21 Oct 2026	OpenAI will notify Customer of any changes to the Sub-Processor List via blog post, notification within the Services or other reasonable means, or via email if Customer subscribes to email notifications on the Sub-Processor List site. Customer may object to the use of such additional Sub-processor within 30 days of receiving notice of the change by following the instructions set forth in the Sub-Processor List or by contacting privacy@openai.com. openai.comChecked 21 Oct 2026	openai.comChecked 21 Oct 2026
Anthropic (Claude API & Enterprise)	The trust page HTML is a script shell. The page loads GraphQL operation fetchDataForTrustReport, which returned 22 named subprocessors on 26 Oct 2026. Wayback CDX had no capture of that JSON response.	Baseline captured 26 Oct 2026	Anthropic will provide Customer reasonable notice of the new Subprocessor prior to giving the Subprocessor access to Customer Personal Data. Customer may object to Anthropic’s use of such Subprocessor by providing Anthropic with written notice of the objection within fifteen (15) days of the date of such notice, or Customer is deemed to consent to the new Subprocessor. anthropic.comChecked 26 Oct 2026	trust.anthropic.comChecked 26 Oct 2026
Cohere (Enterprise Platform)	Entities visible on the trust center before View all: Google Cloud, infrastructure service provider, USA; Fullstory, software delivery platform, USA; LaunchDarkly, feature flagging, USA; New Relic, platform monitoring, USA; Retool, software delivery platform, USA; Sentry IO, software delivery platform, USA; Segment, event and error handling, USA; Sendgrid, email communications, USA; Vercel, web application hosting, USA. Hosting FAQ on the same page: Google Cloud Platform servers in US-Central. Entities behind View all: Not published.	Baseline captured 21 Oct 2026	Not published trustcenter.cohere.comChecked 21 Oct 2026	trustcenter.cohere.comChecked 21 Oct 2026
Mistral AI (La Plateforme)	Entity names: Not published. The trust center subprocessors page checked on 21 Oct 2026 did not include them in the HTML. The help article dated 12 August 2026 says the list stays on the Trust Center and that email updates use the bell.	Not published	Mistral AI will provide reasonable notice to the Customer of any changes to the list of Subprocessors prior to engaging such Subprocessor. The Customer may only object in writing to Mistral AI’s appointment of a new Subprocessor within ten (10) days of such notice by providing a written objection to privacy@mistral.ai. legal.mistral.aiChecked 21 Oct 2026	trust.mistral.aiChecked 21 Oct 2026
xAI (Enterprise API)	Cloud infrastructure, services, and support: AWS; Google Cloud; Oracle. Content delivery: Cloudflare; Hive. Other named processors include Axiom, Chronosphere, ClickHouse, Elasticsearch, GrowthBook, Hubspot, LiveKit, MongoDB, Inc., Okta, Paypal (Braintree), Sentry, Stripe, Twilio, Vercel, Wiz, WorkOS, and Zendesk. xAI Affiliates are listed in the United States for cloud infrastructure, services, and support. An xAI subsidiary is listed in the United Kingdom for services and support.	Baseline captured 21 Oct 2026	The DPA says the vendor will notify the customer if it adds or replaces subprocessors "at least fifteen (15) days before such changes take effect." The customer may object "within fifteen (15) days after receiving notice." x.aiChecked 21 Oct 2026	x.aiChecked 21 Oct 2026
Inference Hosts & Neoclouds
Together AI	Not stated	Not published	Not stated together.aiChecked 26 Oct 2026	together.aiChecked 26 Oct 2026
Fireworks AI	Not stated	Not published	Not stated fireworks.aiChecked 26 Oct 2026	fireworks.aiChecked 26 Oct 2026
Groq	Not stated	Not published	Not stated groq.comChecked 26 Oct 2026	groq.comChecked 26 Oct 2026
CoreWeave	Not stated	Not published	Not stated docs.coreweave.comChecked 26 Oct 2026	docs.coreweave.comChecked 26 Oct 2026
Crusoe	Not stated	Not published	Not stated legal.crusoe.aiChecked 26 Oct 2026	legal.crusoe.aiChecked 26 Oct 2026
Nebius	Not stated	Not published	Not stated docs.nebius.comChecked 26 Oct 2026	docs.nebius.comChecked 26 Oct 2026

Loading the matrix.