Where is my data hosted, and who else processes it?
ModelRiver runs on Amazon Web Services in the United States (us-east-1), with all traffic passing through Cloudflare. Your data is processed in the United States.
Can I choose an EU or other region?#
Not today. All data is hosted in the United States. For transfers from the EU, UK and Switzerland, our Data Processing Agreement includes the Standard Contractual Clauses. See Is ModelRiver GDPR-compliant?
Which companies process my data for ModelRiver?#
| Subprocessor | What for | Where |
|---|---|---|
| Amazon Web Services | Hosting, database, backups | US |
| Cloudflare | DNS, HTTPS, DDoS protection, CDN (data in transit only) | Global |
| OpenAI | Guardrail moderation, only for prompts our own checks can't classify | US |
| Stripe | Payments and invoicing | US |
| Resend | Transactional email | US |
| Sentry | Error monitoring, with request bodies and headers removed | US |
The subprocessors page always has the current list.
Are the AI providers I connect subprocessors?#
No. Providers you connect with your own keys, and webhook endpoints you set up, are your own choice and covered by your own agreements with them.
Will I be told if this list changes?#
Yes. Owners of paid organizations get an email at least 30 days before a new subprocessor is added. You can object, and if we can't resolve it you can end your subscription with a pro-rata refund.