AI model providers

AI provider sub-processor terms, side by side

How much notice six AI model providers give before adding a sub-processor, and where each publishes its list, quoted with the date read.

Each provider’s DPA states a period for a new sub-processor. Some give you that long to object once they tell you; others promise that much notice before the new company starts.Of these six, five state a period to object and one a notice period.Each is quoted from the provider’s own document with the date we read it; we do not score or rank them.

The terms, quoted

OpenAI

Sub-processor window

30 days to object

Customer may object to the use of such additional Sub-processor within 30 days of receiving notice of the change by following the instructions set forth in the Sub-Processor List or by contacting privacy@openai.com.

openai.com/policies/data-processing-addendum/ · read September 30, 2026 · snapshot c5e00f952a13

How notice is sent

We have not isolated a sentence on this in the pages we read. That is a statement about our record, not about OpenAI.

Where the list is

Anthropic

Sub-processor window

15 days to object

In the event that Anthropic wishes to appoint an additional Subprocessor: (a) Anthropic will provide Customer reasonable notice of the new Subprocessor prior to giving the Subprocessor access to Customer Personal Data; and (b) Customer may, on the basis of reasonable data privacy or data security concerns, object to Anthropic’s use of such Subprocessor by providing Anthropic with written notice of the objection within fifteen (15) days of the date of such notice, or Customer is deemed to consent to the new Subprocessor.

anthropic.com/legal/data-processing-addendum · read September 24, 2026 · snapshot 6add88ab9195

How notice is sent

We have not isolated a sentence on this in the pages we read. That is a statement about our record, not about Anthropic.

Where the list is

Google Cloud

Sub-processor window

30 days' notice before a change

When Google engages any New Subprocessor during the Term, Google will, at least 30 days before the New Subprocessor starts processing any Customer Data, notify Customer of the engagement (including the name, location and activities of the New Subprocessor).

cloud.google.com/terms/data-processing-addendum · read September 10, 2026 · snapshot 3378541a2685

How notice is sent

We have not isolated a sentence on this in the pages we read. That is a statement about our record, not about Google Cloud.

Where the list is

Mistral AI

Sub-processor window

10 days to object

The Customer may only object in writing to Mistral AI's appointment of a new Subprocessor within ten (10) days of such notice by providing a written objection to privacy@mistral.ai, provided that such objection is based on reasonable grounds relating to the Applicable Data Protection Law, otherwise such new Subprocessor will be deemed approved.

legal.mistral.ai/terms/data-processing-addendum · read August 31, 2026 · snapshot 8778ed476e03

How notice is sent

If Customer subscribes to receive updates available on Mistral AI’s Subprocessor page on the Trust Center, Customer will be automatically notified by email of any addition or replacement of a Subprocessor to this list,

legal.mistral.ai/terms/data-processing-addendum · read September 30, 2026

Where the list is

We do not watch a sub-processor list page for Mistral AI.

xAI

Sub-processor window

15 days to object

You may object on reasonable grounds relating to data protection to our engagement of any new or replacement Subprocessor by informing us in writing within fifteen (15) days after receiving notice.

x.ai/legal/data-processing-addendum · read September 30, 2026 · snapshot a63e03589acb

How notice is sent

We have not isolated a sentence on this in the pages we read. That is a statement about our record, not about xAI.

Where the list is

Groq

Sub-processor window

15 days to object

Customer may object in writing to the appointment of a new Subprocessor within 15 days of such notice, provided that such objection is based on reasonable grounds relating to data protection.

console.groq.com/docs/legal/customer-data-processing-addendum · read September 30, 2026 · snapshot 8744ee552375

How notice is sent

We have not isolated a sentence on this in the pages we read. That is a statement about our record, not about Groq.

Where the list is

How this page stays current

The pages quoted here are re-read on a schedule and every reading is kept as a dated, hashed copy. The quotes on this page are read from those copies when the page is served, so a rewritten clause appears here as the new wording, and the change appears on the provider’s record. How the record is kept.

Related: every window we hold, what a sub-processor is, AI providers' data terms.

What this page is not

It is not legal advice, and it is not your agreement. It quotes published documents on the dates shown; a signed agreement or negotiated addendum with a provider governs.

Xither Staff Writer · reviewed October 1, 2026. Quotes are read from the record when the page is served.