Overview
anycast.io UG (haftungsbeschränkt) uses the subprocessors and technical service providers listed below to operate 2342.ai. This list is Annex B of the Data Processing Agreement and is versioned like it: for an organization, the version pinned by fingerprint at acceptance applies and stays available at its versioned address. Changes are announced to organization owners and admins by email before they take effect.
GLM 5.2, GLM 5.3 and GLM 5.3 Flash as well as Qwen 3.6 27B, Qwen 3.8 27B, Gemma 4 31B, GPT-OSS 120B and DeepSeek V4.1 Flash run on the regional data path in the Nuremberg data center of noris network with zero data retention. GLM 5.3, GLM 5.3 Flash and GPT-OSS 120B additionally fall back to the EU data path through in-region routing to EU endpoints with zero data retention. Which providers process a given model and under which retention and training terms is stated in the model datasheet (Annex C) at https://2342.ai/en/model-datasheet.
AI model providers (inference)
Depending on the selected model and data path, requests are processed through the following providers. For each provider the contractual basis is named, and for providers established outside the EU the transfer basis under Chapter V GDPR.
- Microsoft Ireland Operations Limited, Dublin, Ireland — ChatGPT models and text embeddings through Azure OpenAI in the EU Data Zone, text to speech for ad videos in the EU, and image generation for ad videos and the image tool with global processing; no training on inputs and outputs, abuse monitoring with storage of up to 30 days within the EU — Microsoft Products and Services Data Protection Addendum; processing in the EU
- Amazon Web Services EMEA SARL, Luxembourg — Claude models through Amazon Bedrock in the regions eu-central-1, eu-west-1 and eu-north-1; no storage of inputs and outputs, no training — AWS GDPR Data Processing Addendum; processing in the EU
- Google Cloud EMEA Limited, Dublin, Ireland — Gemini models through Vertex AI in EU regions; no training on inputs and outputs — Google Cloud Data Processing Addendum; processing in the EU
- OpenRouter, Inc., USA — routing of requests exclusively to zero-data-retention endpoints; EU data path through the EU domain with in-region routing and processing only in the EU (including GLM 5.3 and GLM 5.3 Flash), models labeled external through global routing — OpenRouter Data Processing Agreement with EU Standard Contractual Clauses (Module 2, Implementing Decision (EU) 2021/914); no EU-U.S. Data Privacy Framework certification; transfer impact assessment documented: as a router, OpenRouter does not persistently store content
- noris network AG, Nuremberg, Germany — regional AI inference (data path Nuremberg) for the GLM, Qwen, Gemma, GPT-OSS and DeepSeek models in its certified data center; zero data retention, no training — data processing agreement under Art. 28 GDPR
- CONTINUUM AI PTE. LTD., 21 Merchant Road, #07-02, Singapore 058267 (OrcaRouter) — inference for uncensored models and the OrcaCyber security models for security testing; the provider confirmed in writing on 22 October 2026 that no data is logged at gateway or inference level as long as logging stays switched off for our workspace; provider based in Singapore; according to its written statement of the same day it has no EU endpoints, the OrcaCyber models run in data centers in the United States, and a web application firewall of Tencent with servers worldwide sits in front of its interface, with a change to Cloudflare planned; processing without an EEA commitment; external data path only after the organization enables it and not intended for personal data — a data processing agreement with EU Standard Contractual Clauses (Module 3, Implementing Decision (EU) 2021/914) is being finalized and announced by the provider for the coming days; until then this data path is released exclusively for content without personal data
- Features & Labels, Inc. (fal.ai), San Francisco, USA — video generation (Seedance) for ad videos and the video tool in chat; for ad videos only AI-generated images and scene descriptions written by the model are transmitted, automatically checked for personal data before sending; for the video tool the prompt and an optional source image; no account or user data — fal Data Processing Addendum with EU Standard Contractual Clauses (Module 2, Implementing Decision (EU) 2021/914); processing in the USA
- Eleven Labs Inc., New York, USA — text to speech with quality voices for ad videos; only the spoken text is transmitted, automatically checked for personal data before sending, no account or user data — ElevenLabs Data Processing Addendum with EU Standard Contractual Clauses (Module 2) and certification under the EU-U.S. Data Privacy Framework; processing in the USA
Changes and right to object
Intended additions or replacements of subprocessors are announced by email to the owners and admins of every organization with a DPA before they take effect and published as a new version of this list. The customer may object to the change for compelling data-protection reasons; if no agreement is reached, the customer has the special termination right under section 5 of the DPA. Until the change takes effect, the accepted version remains authoritative.
The Data Processing Agreement is available at https://2342.ai/en/dpa, the model datasheet at https://2342.ai/en/model-datasheet.
