Data location · in plain words
Where inference runs
Every operator, every country, every exception. In short: EU-tier requests run only in Finland and Poland and never leave the EU. Peer-to-Peer stays in the EU too, unless you explicitly switch on worldwide processing for a key. As of 25 October 2026.
| What | Operator | Location | Applies to |
|---|---|---|---|
| Website, dashboard, API gateway, database | Hetzner Online GmbH | Helsinki, Finland (EU) | All tiers. No third-party CDN or proxy in front of api.decisionmodels.io; TLS 1.2/1.3. |
| GPU inference (always on) | UpCloud Oy | Data centre FI-HEL2, Helsinki, Finland (EU) | EU tier and Peer-to-Peer base capacity; extra servers at peak EU load serve the EU tier only. Gateway to GPU over a WireGuard tunnel. |
| GPU inference (dedicated servers) | GPU Server Hub (BESTCONNECT, Janusz Ciuruś) | 4DataCenter Katowice, Poland (EU) | Since 23 Oct 2026 for EU-tier customers who agreed in writing; for all customers from 21 Nov 2026. Bare-metal servers operated by us. |
Routing classifier s1-llm-auto-router | our own CPU cores | EU | Peer-to-Peer and EU. |
| Overflow with “Allow worldwide processing” | Lium and independent GPU providers | worldwide | Only for Peer-to-Peer keys where you switch this on. Without the opt-in, Peer-to-Peer stays in the EU. |
| “Peer-to-peer network processing” | independent providers (Bittensor subnet 92) | worldwide | Only with its own per-key opt-in; providers see content in clear text, so no personal data. Router and reference GPU at DataCrunch Oy (Verda), Finland. |
Data
What is stored
- Request and response content is not stored on our gateway or our inference servers; it is held in memory only for the duration of the request. We do not train on your data.
- We keep account data and usage receipts (such as token counts); see data retention.
- This commitment does not extend to Lium GPU providers or independent network providers; both are used only with your own opt-in.
- Sign-in (Google, optional email link) and payments (Stripe) never receive API content.
Contracts
What you get in writing
- Data Processing Agreement under Art. 28 GDPR, publicly readable, accepted at signup.
- New sub-processors for API content are announced at least 7 days in advance (30 days if you accepted only DPA 1.2 or earlier); you may object.
- EU AI Act statement: our role, and the intended purpose and limits of the models.