Third-party services that process data on our behalf
Last Updated: February 2026
WINIQ AI LTD (trading as WinIQ) engages certain third-party subprocessors to assist in providing services to our customers. This page provides a comprehensive list of all subprocessors that may process customer data as part of our service delivery.
All subprocessors listed below have entered into Data Processing Agreements (DPAs) with WinIQ that include appropriate contractual safeguards for personal data protection, including Standard Contractual Clauses (SCCs) where data is transferred outside the European Economic Area.
We provide at least 30 days' notice before adding new subprocessors. Subscribe to receive notifications of changes.
Subscribe to UpdatesLarge language model and AI processing services
Your Data Is Never Used for AI Training
All AI providers process data via their enterprise APIs under zero-data-retention agreements. Customer data is processed in real-time and immediately discarded—it is never stored, logged, or used to train models.
| Subprocessor | Purpose | Data Location | Safeguards | Status |
|---|---|---|---|---|
|
OpenAI
San Francisco, USA
|
GPT-4 language model for document analysis, RFP processing, and content generation | United States | DPA + SCCs | Active |
|
Microsoft Azure OpenAI
Redmond, USA
|
Enterprise GPT deployment with EU data residency option | EU (West Europe) or US (configurable) | DPA + SCCs | Active |
|
Anthropic
San Francisco, USA
|
Claude language model for document analysis and response generation | United States | DPA + SCCs | Active |
|
Google Cloud (Gemini)
Mountain View, USA
|
Gemini language model for AI processing capabilities | United States / EU (configurable) | DPA + SCCs | Active |
Cloud infrastructure and database services
| Subprocessor | Purpose | Data Location | Safeguards | Status |
|---|---|---|---|---|
|
Google Cloud Platform (GCP)
Mountain View, USA
|
Application hosting, database (Cloud SQL), compute infrastructure, and backend services | United States / EU (configurable) | DPA + SCCs | Active |
|
IONOS
Montabaur, Germany / UK
|
Website hosting for winiq.ai marketing site | United Kingdom | DPA | Active |
Payment, analytics, and communication services
| Subprocessor | Purpose | Data Location | Safeguards | Status |
|---|---|---|---|---|
|
Stripe
San Francisco, USA
|
Payment processing, subscription management, and invoicing | United States / Ireland (EU) | PCI DSS Level 1 | Active |
|
Google Analytics (GA4)
Mountain View, USA
|
Website analytics (requires user consent) | United States | DPA + SCCs | Active |
|
FormSubmit
United States
|
Contact form processing for website inquiries | United States | DPA + SCCs | Active |
Contact our Data Protection team for questions about subprocessors, DPAs, or to request copies of our data processing agreements.