How to read this list
A subprocessor is a third party YTT Secunet engages to process customer personal data on the customer's behalf. Each entry gives the category of provider, the locations where processing happens and the function it performs. Every subprocessor signs a written agreement with data protection obligations equivalent to our Data Processing Agreement, and our security and compliance team reviews each one before engagement and every year after.
The legal entity behind each entry is disclosed to customers in the Trust Center and in the DPA annex we countersign.
Control plane
The control plane holds configuration and evidence, never prompt content.
- EU-headquartered IaaS provider: Frankfurt am Main, Germany and Paris, France: control plane hosting for the console, policy store, configuration, receipt ledger and published Merkle roots. Frankfurt is primary and Paris is the standby.
Regional data planes
A tenant's traffic is processed only in the zones its policy admits. A tenant restricted to the EU never touches the UK, Swiss or US entries below, and failover stays inside the same jurisdiction.
- EU data plane hosting provider: Frankfurt am Main, Germany, with failover in Amsterdam, the Netherlands and Paris, France: in-memory request processing, PII masking and the pseudonymization vault for EU tenants.
- UK data plane hosting provider: London, United Kingdom: the same functions for UK tenants.
- Swiss data plane hosting provider: Zurich, Switzerland: the same functions for Swiss tenants.
- GCC data plane hosting providers: Kingdom of Saudi Arabia and United Arab Emirates: the same functions for GCC tenants, with each country kept separate where the tenant's policy requires it.
- APAC data plane hosting providers: Singapore, with in-country capacity in Australia, Japan and India for tenants whose policy requires it: the same functions for APAC tenants.
- US data plane hosting provider: United States: the same functions for US tenants, including protected health information routed under a Business Associate Agreement.
Service providers
These providers support the account, not the inference path, and never receive prompt or completion content.
- Transactional email provider: European Union: console invitations, alerts, invoices and subprocessor change notices.
- Customer support ticketing provider: European Union: support tickets and related correspondence.
- Payment processor: European Union and United States: card payments and billing records for self-serve plans.
- EU-hosted monitoring provider: Germany: operational metrics, request metadata and error events.
Model providers you select
The model providers and runtimes your traffic reaches are not on this list, because YTT Secunet does not engage them. You select them, connect them with your own credentials under your own contracts, and instruct YTT Secunet to route to them. The gateway sends a request only to an endpoint admitted by your policy, and the signed receipt records the endpoint, provider region and facility that served it.
Review each provider's own DPA and subprocessor list as part of your assessment. Our Sovereign AI Index and integration guides describe where their in-region endpoints run and which features can move data out of region.
Sovereign Dedicated
On Sovereign Dedicated the data plane runs in your VPC or on premises, so the data plane entries above do not apply. The control plane can run EU-only or in-country, and an air-gapped deployment with offline licensing uses no YTT Secunet subprocessors at all.
Notice of changes
We email the subprocessor update list at least 30 days before adding or replacing a subprocessor and update this page the same day. The notice names the category, location, function and the date the change takes effect. Customers may object on reasonable data protection grounds during those 30 days, as the DPA describes.
Console administrators are added to the list automatically. Anyone else at a customer, such as a DPO or procurement lead, can join by emailing privacy@yttsecunet.com from a work address, and can leave at any time from our unsubscribe page.