Legal
Subprocessors
Draft list of the third parties that help run the decision API, what each one does, and whether it sees request content.
This is a draft outline. The final text is pending counsel review and will be published before the API opens.
The table lists the third parties we plan to use and what each one does.
| Subprocessor | Services | Location | Request content |
|---|---|---|---|
| Microsoft Ireland Operations Limited (Azure) | Hosting, database, cache, logs and secrets in Azure West Europe. The Azure OpenAI fallback in the EU data zone. Email through Azure Communication Services, with a Europe data location. | EU | Yes. In memory while a request runs, and on the fallback path when a request is served there. |
| Stripe Payments Europe, Limited | Payments for balance top-ups | Ireland | No. Payment data only. |
| Uptime monitor: an EU vendor, to be chosen | External availability probes | EU | No. Probes only. |
The inference nodes that answer requests are dedicated hardware operated by thinQit in the Netherlands, not a third-party service.
On the fallback path, Azure OpenAI abuse monitoring may by default store prompts its classifiers flag for up to 30 days inside the EU data zone. See Data handling and residency.
The final text will describe how we announce changes to this list.
Provider: Thinqit B.V., Vanadiumweg 25, 3812PX Amersfoort, the Netherlands. KvK 99883813. Tax ID 869172335. hello@thinqit.io, legal@thinqit.io.