Subprocessors
Last updated: April 2026
Zedoc uses the following third-party subprocessors to deliver its services. We take care to engage only subprocessors that provide sufficient guarantees around data protection and security. Customers are notified of any changes to this list in advance, as described below.
| Subprocessor | Purpose | Location | Data Processed |
|---|---|---|---|
| OVHCloud SAS | Cloud infrastructure and hosting | Gravelines, France (EU) | All customer data including account information and uploaded content |
| OpenRouter, Inc. | AI model routing and inference | United States | Book content explicitly submitted by the user for AI processing tasks (e.g., classification, metadata extraction). No personal account data is sent. |
| Stripe, Inc. | Payment processing | EU data residency (headquartered in United States) | Name, email address, payment card details, and billing address for customers who purchase credits. No book content is sent. |
| Soniox, Inc. | Speech-to-text transcription | EU datacenter | Audio files submitted for transcription tasks. No personal account data is sent. |
Notification of Changes
We will notify customers of any new subprocessors or material changes to existing subprocessors at least 30 days before the change takes effect. Notifications are sent via email to the account owner. If you object to a new subprocessor, please contact us at hi@zedoc.ai within the 30-day notice period.
Data Transfer Safeguards
For subprocessors located outside the European Economic Area (EEA), we ensure appropriate safeguards are in place. OpenRouter processes data in the United States under the EU Standard Contractual Clauses (SCCs) as approved by the European Commission. Stripe is headquartered in the United States but processes payment data with EU data residency, also under SCCs. All other subprocessors process data within the EU/EEA.