Sub-processors
All third-party providers Rankion uses for data processing.
Translation notice — The German version of this document is the legally binding original. This English translation is provided for informational purposes only. In case of any conflict between this translation and the German version, the German text shall govern. View authoritative German version.
This list is the only authoritative source. It is updated on every change to our AI / data pipeline. As of 2026-05-03.
What a sub-processor is: An external service provider to which we transfer data for processing — for example, when you ask Rankion to generate an article, your prompt is sent to Anthropic for processing. We process as little data externally as possible and configure zero data retention everywhere the provider supports it.
Sub-processor list
| Provider | Product | Purpose | Region | Retention | Legal basis | DPA |
|---|---|---|---|---|---|---|
| Anthropic, PBC | Claude Sonnet 4.6 / Haiku 4.5 | Content-Generierung, Analyse, Chat-Assistent | USA | 0 Tage (Zero-Data-Retention konfiguriert) | EU-US Data Privacy Framework | DPA ↑ |
| OpenAI, L.L.C. | GPT-4.1 mini, DALL-E 3 | Multi-LLM-Vergleich (Reality-Check), Bild-Generierung | USA | 30 Tage (API Standard) | EU-US Data Privacy Framework | DPA ↑ |
| Google LLC | Gemini 2.0 Flash | Multi-LLM-Vergleich (Reality-Check) | USA / EU | 0 Tage (über API ohne Training) | EU-US Data Privacy Framework + SCCs | DPA ↑ |
| Perplexity AI, Inc. | Sonar (Web-Search-augmented LLM) | Reality-Check mit Live-Web-Search | USA | 30 Tage | EU-US Data Privacy Framework | DPA ↑ |
| X.AI Corp. | Grok 3 mini fast | Multi-LLM-Vergleich (Reality-Check) | USA | API Standard | Standard Contractual Clauses | DPA ↑ |
| Microsoft Corporation | Azure OpenAI Service | Enterprise-Alternative für GPT-Modelle | EU (West Europe) / USA | 0 Tage (mit opt-out konfiguriert) | EU-US Data Privacy Framework + SCCs | DPA ↑ |
| Black Forest Labs GmbH | Flux Pro | Bild-Generierung | Deutschland (EU) | 0 Tage | Direkte EU-Verarbeitung (Art. 6 Abs. 1 lit. b DSGVO) | DPA ↑ |
| Scraper API, LLC | ScraperAPI | Web-Scraping für Content-Audit / Optimizer | USA | Nicht persistiert (durchgereicht) | Standard Contractual Clauses | DPA ↑ |
| Serper.dev | Serper Search API | Keyword-Research, SERP-Analyse | USA | Nicht persistiert | Standard Contractual Clauses | DPA ↑ |
Provider, product and purpose strings come from our internal AI inventory and are kept in their original phrasing (often German legal terminology, e.g. "Auftragsverarbeitungsvertrag"). Translations of those terms appear elsewhere on this page.
Which provider for what?
Used in: KI-Chat-Assistent (Agentic Chat), Artikel-Generator, Content-Audit, Content-Optimizer, AI Humanizer, AI Detection Scanner, SERP Content Analysis, Wettbewerbs-Analyse, Gap-Analyse, Content-Repurposing, Reality-Check
Used in: Reality-Check, Bild-Generierung
Used in: Reality-Check
Used in: Reality-Check
Used in: Reality-Check
Used in: Artikel-Generator, Reality-Check
Used in: Bild-Generierung
Used in: Content-Audit, Content-Optimizer
Used in: Keyword-Research, SERP Content Analysis
Subscribe to changes
Business customers with a DPA can subscribe to changes to this list by email — write to trust@rankion.ai. We announce changes at least 14 days before they take effect, so you can exercise your right to object (Art. 28(2) GDPR).
Last update: 2026-05-03