Subprocessors and Data Recipients
Version 2.0.0Date d’entrée en vigueur à annoncer
BROUILLON — nécessite une relecture juridique. Le texte est un modèle préparé sans juriste et n’est pas définitif ; les champs entre doubles accolades restent à compléter.
Affiché en anglais à titre indicatif. La version juridiquement contraignante est la version russe ; en cas de divergence entre les textes, la version russe prévaut. Ouvrir la version russe
Version 2.0.0 of {{EFFECTIVE_DATE}}. Operator: {{COMPANY_NAME}}. We give {{SUBPROCESSOR_NOTICE_DAYS}} days' notice of changes (see the DPA, section 7).
1. Infrastructure and services
| Subprocessor | Purpose | Location | Data categories | Status |
|---|---|---|---|---|
| Yandex Cloud ({{HOSTING_PROVIDER}}), region ru-central1 | Hosting: account and audit DB, raw-answer storage (S3), analytics DB, search index, backups, logs | Russia | Account data, audit log, customer content, AI answers, technical logs | Planned (development currently runs locally; confirm before launch) |
| {{EMAIL_PROVIDER}} (Russian email service; e.g. Yandex Cloud Postbox, Unisender — not yet chosen) | Service emails (and, with consent, marketing emails) | Russia — mandatory requirement | Email, message text, language | Not chosen |
| {{PAYMENT_PROVIDER}} (YooKassa or CloudPayments — the choice in docs/payments-research.md is not final) | Card and SBP payments, recurring charges, 54-FZ receipts | Russia | Receipt email, amount, payment ID, payment-method token (kept by the provider); card data entered only with the provider | Planned |
| Payer's/payee's bank | Bank-transfer settlement on invoices | Russia | Entity/entrepreneur details | As needed |
2. Third-party AI services (measurement points)
They receive only question texts (and, where needed, brand names and facts set by the customer). Account data is not sent. Personal data in questions is prohibited (AUP).
| Provider | Purpose | Location | Data categories | Status |
|---|---|---|---|---|
| Yandex AI Studio / Yandex GenSearch | Answers of Yandex models and generative search; possibly used as the judge model | Russia | Question texts, answers | Planned (Yandex Cloud API terms to be confirmed in writing) |
| Sber GigaChat (corporate tariff) | GigaChat answers | Russia | Question texts, answers | Planned |
| LLM aggregator {{LLM_AGGREGATOR_NAME}} (OpenAI-compatible endpoint) | Access to OpenAI/ChatGPT models ("ChatGPT" point) | {{LLM_AGGREGATOR_COUNTRY}} (requests may be further processed by OpenAI, USA, and other model providers) | Question texts (no personal data), answers | Cross-border transfer. Owner's decision of 13.10.2026. Required: Roskomnadzor notification (Art. 12 152-FZ), recipient assessment, review of aggregator and OpenAI terms on unsupported regions (risk of cut-off) |
| Anthropic, PBC (Claude) | Claude answers with web search ("Claude" point), via the API directly or through the LLM aggregator | USA | Question texts (no personal data), answers, approximate search location (city/country of the measurement region) | Cross-border transfer (USA). Enabled only when a key is configured. Russia is not on Anthropic's supported-countries list — in practice through the aggregator |
| Google LLC (Gemini API) | Gemini answers grounded in Google Search | USA (and other Google countries) | Question texts (no personal data), answers | Cross-border transfer (USA). Russia is not an available Gemini API region — in practice through the aggregator |
| Perplexity AI, Inc. | Perplexity (Sonar) answers with sources | USA | Question texts (no personal data), answers, city/country of the measurement region | Cross-border transfer (USA) |
| X.AI LLC (Grok) | Grok answers with web search | USA | Question texts (no personal data), answers | Cross-border transfer (USA) |
| Mistral AI SAS | Mistral model answers with web search | France (EU) | Question texts (no personal data), answers | Cross-border transfer (EU) |
| DeepSeek (Hangzhou DeepSeek Artificial Intelligence; entity to be confirmed) | DeepSeek answers (no web search) | China | Question texts (no personal data), answers | Cross-border transfer (PRC). PRC data rules; check the terms for automated measurement |
| Alibaba Cloud (Model Studio, Singapore region) | Qwen answers with web search | Singapore (group: PRC) | Question texts (no personal data), answers | Cross-border transfer |
| Moonshot AI (Kimi) | Kimi answers; web search via Moonshot's search API | China | Question texts and the model's search queries (no personal data), answers | Cross-border transfer (PRC) |
| Zhipu AI / Z.ai (GLM) | GLM answers with web search | China (Z.ai international — entity and country to be confirmed) | Question texts (no personal data), answers | Cross-border transfer (PRC) |
| BytePlus (ByteDance, ModelArk; Doubao/Seed) | Doubao model answers (no web search) | Singapore (group: PRC) | Question texts (no personal data), answers | Cross-border transfer |
| MiniMax | MiniMax model answers (no web search) | China / Singapore (entity to be confirmed) | Question texts (no personal data), answers | Cross-border transfer |
| OpenAI directly | — | USA | — | Not used. Direct connection from Russia is not planned (Russia is not on OpenAI's supported-countries list) |
| Self-hosted judge model (vLLM) | Answer analysis | Russia | Answer texts | Planned |
3. Not used
Foreign analytics, error, logging, support and CRM services receiving user data. Third-party cookies and pixels.
Notes for the lawyer
Identify the aggregator's legal entity, country, contract, request-logging and retention; reflect in DPA Annex III. Confirm each row by contract.
- Version 2.0.0 (16.10.2026, draft): adds the AI providers Anthropic, Google, Perplexity, xAI, Mistral, DeepSeek, Alibaba Cloud, Moonshot, Zhipu/Z.ai, BytePlus and MiniMax. Under docs/legal/README.md this is a MAJOR change (new recipients and cross-border transfers, incl. to the PRC and the USA). Each provider is enabled separately (API key or aggregator route); before enabling one in production: lawyer review, Roskomnadzor cross-border notification for the countries concerned (PRC, USA, Singapore are not "adequate" jurisdictions), recipient assessment, review of each vendor's terms (automated measurement/benchmarking, resale, use from Russia, sanctions), and synchronized updates of
privacy(s. 7.3) anddpa(s. 7.3, Annex III) with re-acceptance under the MAJOR rules.privacy/dpatexts are not changed in this version. - When a provider is called through the LLM aggregator, both the aggregator and the model vendor are recipients.