Data processing & subprocessors
What we promise
- Prompts, files and replies are processed only on servers in the EU.
- They are never stored or logged — by us or by any subprocessor. We keep usage counts only: time, key, model, tokens, status.
- Your data is never used to train models.
- Monitoring, error tracking and backups also stay on servers in the EU and never contain request content.
Data processing agreement
Business customers and partners receive our data processing agreement under Art. 28 GDPR. It includes technical and organisational measures and the list of subprocessors.
Subprocessors
We work only with subprocessors that process data on servers in the EU, with zero retention and no training in their contracts. The current list is an annex to the signed data processing agreement and is provided to customers on request, under confidentiality. Customers are notified before any change and may object.
Request the DPA
Email info@zana.ai with your company name.