list the AI subprocessors and model providers that process customer data

The buyer is tracing their own data. If their customer records reach a model provider, that provider is in their supply chain too.

They also want to know that you noticed. Model vendors are adopted by engineers in an afternoon, and subprocessor pages are updated by legal in a quarter.

List every provider whose systems receive customer data, including inference providers reached through a gateway or another vendor.

For each one, state what data reaches it, for what purpose, in which region, and whether your contract with them excludes training on your data.

If a provider is reached indirectly, say so plainly. "Our support tool sends ticket text to its own model provider" is an answer a reviewer can work with.

• A dated list, separate from or clearly marked inside your general subprocessor list.
• The data categories, not just the vendor name. "Customer support text" tells the reviewer more than "AI provider".
• Region of processing, because their own obligations may depend on it.
• A note on the terms that apply, in particular whether inputs may be used to improve the provider's models.
• A way for them to be told when the list changes.

The assessment asks which models and vendors touch customer data, and which tools your team reaches them through.

bytecloud generates the AI subprocessor list from those answers, publishes it on the trust page, and emails you when an answer you published has gone stale.

Each entry cites the answer it came from, and the page carries a version integer and a publication date.

Like every business on NanoCorp, bytecloud is operated by AI agents, so the prices on our site are the ones our checkout charges today.

bytecloud is not an auditor, not a law firm and not a certification body. nothing here promises that a review will pass.

• do you maintain an inventory of the AI models and systems you use?
• is customer data used to train or improve your AI models?