Vendor record · groq.com

What Groq promises about your data.

Where Groq publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.

Where it publishes

Groq lists its sub-processors at trust.groq.com/subprocessors. We last read it on October 12, 2026, and a later attempt returned HTTP 429.

What has changed

We've recorded no change to its sub-processor list or data processing agreement between September 10, 2026 and September 15, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.

Its window

When it adds a sub-processor, its clause at console.groq.com/docs/legal/customer-data-processing-addendum (read September 30, 2026) gives you 15 days to object.

Window
15

days to object when it adds a sub-processor

Sub-processors
17

sub-processors named

Pages
9

pages we watch

Copies
38

dated copies of all its pages, since August 31, 2026

Groq DPA

Groq's data processing agreement gives 15 days to object to a new sub-processor. Here is the clause, from our September 30, 2026 copy:

15

days to object

“Customer may object in writing to the appointment of a new Subprocessor within 15 days of such notice, provided that such objection is based on reasonable grounds relating to data protection.”

Found automatically and not yet checked by a person. The quote is exact, and the link goes to the source. Nothing here says whether the term is good or bad, only that Groq published it.

console.groq.com/docs/legal/customer-data-processing-addendum · read 2026-09-30 · fingerprint 8744ee55237582a0…

How it says it sends notice

“General ### Subprocessor List Updated Published May 13, 2025 Groq recently updated our subprocessor list in May 2025. Opens in new tab Subscribe to updates Groq, Inc. SOC2 Type II Report For the Period March 18, 2025 to June 18, 2025 Groq, Inc. SOC2 Type II Report For the Period…”

trust.groq.com/ · read 2026-10-08

How it says it sends notice

“If Customer subscribes to email notifications as provided on the Subprocessor List website, then Groq will notify Customer of any changes Groq intends to make to the Subprocessor List at least 15 days before the changes take effect, which may be via email, a posting on the Subprocessor List website, or notification in Console or other reasonable means.”

console.groq.com/docs/legal/customer-data-processing-addendum · read 2026-09-30

Notice windows across every vendor we watch

Groq sub-processors

Groq publishes a sub-processor list at trust.groq.com/subprocessors; we last read it on October 12, 2026, and a later attempt returned HTTP 429. It names 17 entries. The first 15, as the list prints them: Anrok; CloudFlare; Exa; FoundryLabs (e2b); Google Cloud Platform; Hubspot; Intercom; Lago; MailChimp; Oracle Netsuite; PostHog; Salesforce; Stripe; Stytch; SupportNinja; and 2 more in the full table below. The public record holds no change to the list read before September 15, 2026. A change we read after September 15, 2026 is published 30 days after we read it.

17 named · full table

Every public change we have recorded · Where vendors publish their lists

How long Groq keeps your data

We hold no statement about data retention from Groq's watched pages. The pages we watch: changelog groq.com/changelog; deprecation schedule console.groq.com/docs/deprecations; data processing agreement console.groq.com/docs/legal/customer-data-processing-addendum; pricing page groq.com/pricing; privacy policy groq.com/privacy; status page status.groq.com/; sub-processor list trust.groq.com/subprocessors; terms of service groq.com/terms-of-service; trust and security page trust.groq.com/. On training with customer data, Groq's privacy policy (groq.com/privacy, in the copy read October 13, 2026) says: “Information you provide in connection with customer service interactions (note that customer service chats and phone calls may be recorded and stored for quality assurance and training purposes)”

Retention windows vendors publish · What vendors say about training

What the pages say

Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.

Sub-processors named · 17

Anrok

Tax collection and remittance

CloudFlare

Provides web application firewall (WAF) and content delivery network (CDN) services

Exa

Search API services

FoundryLabs (e2b)

Sandboxed code execution

Google Cloud Platform

Cloud Computing

Mountain View, CA

Hubspot

Customer relationship management

Intercom

Conversational relationship platform designed to create personal connections with customers.

San Francisco, CA

Lago

GroqCloud Billing & Invoicing

MailChimp

Account transactional communications (team invites, org communications, key revocation notices, other important account notifications)

Oracle Netsuite

Cloud business software suite providing resource management, accounting, business management, customer relationship management, business intelligence, order ma…

Oklahoma City, OK

PostHog

Product feature testing

Salesforce

Customer relationship managent and support

Stripe

Stripe is a payment processing company that handles sensitive customer data, including credit card information, bank account numbers, and other personal and fi…

California, Oregon

Stytch

Provides datastore for identity records and attributes

San Francisco, CA

SupportNinja

Tier 1 Customer Support

Tavily

Search API services Used for search in the Compound product: https://console.groq.com/docs/compound

Wiz

Cloud security

Certifications the trust page names · SOC 2 · SOC 2 Type II

Laws the trust page names · GDPR · HIPAA

Retirements announced · every vendor's retirements

undated

After the deprecation date, the model will no longer be accessible

2025-04-14

April 14, 2025: Multiple Model Deprecations

undated

Deprecation History

undated

Deprecation Process

2025-08-08

In line with our commitment to bringing you cutting-edge models, on August 8, 2025, we emailed users to announce the deprecation of gemma2-…

2025-12-23

In line with our commitment to bringing you cutting-edge models, on December 23, 2025, we emailed users to announce the deprecation of play…

The pages' own stamps: effective 2025-11-12 · effective 2025-10-15 · Effective 2025-10-15 · Published 2025-11-26

The pages we watch

Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.

Changelog

groq.com/changelog

2026-10-15

Deprecation schedule

console.groq.com/docs/deprecations

2026-10-15

Pricing

groq.com/pricing

2026-10-13

Privacy policy

groq.com/privacy

2026-10-13

Status page

status.groq.com/

2026-10-15

Sub-processor list

trust.groq.com/subprocessors

2026-10-12

Terms of service

groq.com/terms-of-service

2026-10-13

Trust and security

trust.groq.com/

2026-10-08

What this page doesn’t tell you

No score.

Nothing here rates Groq. A short notice window is a contract term, not a criticism.

Public pages only.

Private notices and negotiated terms are invisible to us. Your agreement may say something different.

Wrong? Tell us.

Corrections are free, always. We reply within 2–3 business days.

How we read a page · The change log

Work at Groq? With an email at groq.com you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.

Is Groq in your product? Hear the morning we read a change.

You get the lines that moved, in Groq’s own words, and the date any window closes. No card. Nothing to cancel.

Every vendor we watch · Redline, our free weekly email