Authoritative list of third parties VoltageGPU engages to deliver the service. Updated whenever a subprocessor is added, removed, or replaced.
VoltageGPU (VOLTAGE EI, SIREN 943 808 824 00016, Solaize, France) acts as a GDPR Article 28 processor and engages the subprocessors listed below to deliver its Confidential AI Infrastructure. Each subprocessor is bound by a written data-processing agreement (DPA) that imposes confidentiality, security, and sub-processing controls aligned with GDPR Art. 28(2)-(4) and Standard Contractual Clauses (SCCs) where applicable.
Last updated: 2026-05-14. Subscribe to changes by emailing legal@voltagegpu.com with subject subscribe subprocessors. A machine-readable RSS feed is planned at /trust/subprocessors.rss.
| Subprocessor | Purpose | Data categories | Location & safeguards | DPA / privacy |
|---|---|---|---|---|
| Vercel Inc. | Hosting for the marketing site (voltagegpu.com), Trust Center, and documentation. CDN, TLS termination, edge logs (metadata only). | Public site traffic metadata (IP, user agent, route, status). No prompt or PHI content. | United States (with regional EU edge caches). SCCs in place. | link |
| Neon (Databricks) | PostgreSQL database for user accounts, billing records, API key metadata. | Account data (email, hashed password), billing records, API key metadata. No prompt content. No PHI. | EU region (eu-central-1, Frankfurt). SCCs in place. | link |
| OVHcloud (OVH SAS) | Hosting for the VoltageGPU Agent Network VPS (outreach, monitoring, SEO agents). EU-hosted. | Operational logs, outreach contact data. No prompt content. | France (Roubaix / Gravelines). EU. | link |
| Render Services Inc. | Backup hosting for selected agents (failover). | Operational logs only. | United States. SCCs in place. | link |
These subprocessors operate the Intel TDX hosts and TEE inference pools where customer prompts, agent inputs, and document content are processed. The architecture is designed so that the host operator does not have technical means to read enclave memory in plaintext; attestation evidence (Intel TD Quote) is available on request and verifiable off-chain against Intel's public PKI.
| Subprocessor | Purpose | Data categories | Location & safeguards | DPA / privacy |
|---|---|---|---|---|
| Targon (Targon Foundation Ltd) | Confidential GPU compute provider — Intel TDX hosts for H200 and B200 Confidential Compute pods. | Customer workloads run inside Intel TDX enclaves. The architecture is designed so that Targon, as the host operator, does not have technical means to read enclave memory in plaintext (TDX attestation evidence available per session). | EU compute pool (primary). DPA in place. | link |
| Chutes AI | Inference provider for the TEE model catalog (Qwen3-32B-TEE, DeepSeek-V3.2-TEE, etc.) and Confidential Agents runtime. | Inference prompts and responses processed inside TEE-sealed pods. The architecture is designed so that Chutes, as the runtime operator, does not have technical means to read in-enclave content in plaintext. | Distributed TEE pool. DPA in place. | link |
| Subprocessor | Purpose | Data categories | Location & safeguards | DPA / privacy |
|---|---|---|---|---|
| Stripe Payments Europe Ltd | Card payments and subscription billing. | Cardholder data (handled by Stripe directly — VoltageGPU never sees raw card numbers), billing address, email. | Ireland (EU). PCI-DSS Level 1. | link |
| Coinbase Commerce | Cryptocurrency payments (BTC, USDC, USDT). | Wallet addresses, transaction hashes, amount, email. | Ireland (EU). DPA in place. | link |
| BlockCypher Inc. | Bitcoin P2P payment verification (UTXO lookups, webhook confirmations). | BTC addresses, transaction hashes (public on-chain data). | United States. SCCs in place. | link |
| Alchemy (Alchemy Insights Inc.) | Ethereum / Arbitrum RPC for USDC / USDT / ETH payment confirmations. | EVM addresses, transaction hashes (public on-chain data). | United States. SCCs in place. | link |
| Subprocessor | Purpose | Data categories | Location & safeguards | DPA / privacy |
|---|---|---|---|---|
| OVHcloud Email (contact@voltagegpu.com) | Transactional and support email. | Email addresses, support correspondence. | France. | link |
| Cloudflare, Inc. | DNS, anti-DDoS, edge WAF for voltagegpu.com. | Public site traffic metadata. | Global edge; EU SCCs. | link |
When VoltageGPU intends to add or replace a subprocessor, customers who have signed a DPA are notified by email at least 30 days before the change takes effect, with the right to object as set out in the DPA. For non-DPA customers, this page is the source of truth and is updated in advance of the change.
Back to Trust Center · Privacy policy · Data Processing Agreement