Subprocessors
Who else touches your data
To run QuestOmics we rely on a small number of providers. This page names every one of them, what it can see, and where it operates. Each is bound to process data only on our instructions. None of them is permitted to use your data for its own purposes.
Last updated: July 2026
What never leaves our infrastructure
Your raw sequencing files are held and processed only by the infrastructure providers in the first table below, all of which operate in the EU. They are never sent to an AI provider, a payment processor, or a literature database. When you request a written interpretation, what leaves is the result table as text, not the reads it came from.
Infrastructure and hosting
These providers hold or transport your uploaded files, your results and your account records.
| Provider | What it does | What it can see | Where | Transfers |
|---|---|---|---|---|
| Amazon Web Services EMEA SARL | Object storage (S3), application server (EC2), job queue (SQS) | Uploaded sequencing files, analysis outputs, the application database including account records | Stockholm, Sweden (eu-north-1) | Stays in the EEA |
| netcup GmbH | Compute servers that run the analysis containers | Uploaded sequencing files and intermediate results, for the duration of an analysis | Germany | Stays in the EEA |
| Cloudflare, Inc. | Website hosting, CDN and network protection | Connection metadata (IP address, request headers) and the pages served to your browser | United States, with global edge network | Standard Contractual Clauses |
AI text generation
When you ask for a written interpretation, the result table is sent as text to Mistral, in France, to write it. Raw sequencing files are never sent. The Gut Assistant searches a literature index that stays on our EU servers; only your question and the passages it matches are sent to Groq to compose the answer.
| Provider | What it does | What it can see | Where | Transfers |
|---|---|---|---|---|
| Mistral AI SAS | Writing the plain-language version of your analysis results | Analysis result tables as text, group labels, and the study context you set on the project | France | Stays in the EEA |
| Groq, Inc. | Summarizing the matched literature into the claims of a Gut Assistant answer | The questions you ask the Gut Assistant and the literature passages matched to them. It also completes a result narrative on the rare occasion the main writer is unavailable | United States | Standard Contractual Clauses |
Billing, email and sign-in
These handle billing, email and sign-in, and never receive your uploaded sequencing data or analysis results. Your default sign-in, email and password, is handled on our own EU servers; Google sign-in is optional.
| Provider | What it does | What it can see | Where | Transfers |
|---|---|---|---|---|
| Stripe Payments Europe, Ltd. | Subscription and top-up payments | Billing details and payment records. Card numbers go directly to Stripe and never reach our servers | Ireland | Stays in the EEA |
| Lettermint | Account and transactional email | Your email address and the contents of the messages we send you | European Union | Stays in the EEA |
| QuestOmics (in-house) | Email and password sign-in, the default | Your email address and a salted hash of your password | Our own EU servers | Stays in the EEA |
| Google LLC | Optional sign-in with Google | Your name and email address, only if you choose to sign in this way | United States | Standard Contractual Clauses |
Scientific literature lookups
Journal Fit and the literature the Gut Assistant cites run on our own EU servers. Only the reviewer-recommendation helper reaches outside services, and only with bibliographic search terms about potential reviewers, never your uploaded data or your results.
| Provider | What it does | What it can see | Where | Transfers |
|---|---|---|---|---|
| QuestOmics (in-house) | Journal Fit matching, and the literature the Gut Assistant cites | Journal matching embeds your manuscript on our own servers; the cited literature is a PubMed-derived index we host ourselves. Neither is sent to an outside service | Our own EU servers | Stays in the EEA |
| OpenAlex, Crossref, ORCID, PubMed (NCBI), Europe PMC (EMBL-EBI) | Looking up potential reviewers' public contact details for the reviewer-recommendation helper | Bibliographic search terms and the identifiers (DOI, ORCID) of candidate reviewers, never your uploaded data or results | United States and United Kingdom | Standard Contractual Clauses |
| LangSearch | Fallback web search when a reviewer's public contact details cannot be resolved from the databases above | Bibliographic search terms | Outside the EEA | Standard Contractual Clauses |
Transfers outside the EEA
Where a provider operates outside the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses, together with the technical measures described on our security page. Providers marked as staying in the EEA process your data entirely within it.
Changes to this list
We keep this page current as the platform changes. If you have a data processing agreement with us and would like advance notice before we add a provider, write to svalenzuela@questomics.app and we will add you to the notification list.