Legal
Subprocessors
This page lists the third-party providers KeyForge engages to process personal data in delivering the Service. We keep it up to date as our subprocessors change.
Effective date: July 6, 2026·Last updated: July 6, 2026
Current subprocessors
| Subprocessor | Purpose | Location | Privacy policy |
|---|---|---|---|
| Stripe, Inc. | Payment processing, subscription billing, and invoicing. | United States | View |
| Google LLC | Optional Google sign-in (authentication) and privacy-conscious website analytics. | United States | View |
| Cloud infrastructure & managed database provider | Application hosting, compute, and encrypted storage of account and audit data. | United States | View |
| Transactional email delivery provider | Sending account, security, billing, and notification emails. | United States | View |
| OpenAI, L.L.C. | Processing of AI requests routed through platform-managed model access. API inputs and outputs are not used to train OpenAI models (per OpenAI API data-usage policy). | United States | View |
| Anthropic, PBC | Processing of AI requests routed to Claude models through platform-managed model access. API inputs/outputs are not used to train models by default. | United States | View |
| OpenRouter, Inc. | Optional multi-provider model routing when selected. Routing and any training use are governed by OpenRouter and the downstream provider you select. | United States | View |
| Other model providers you select (BYOK) | When you configure your own provider keys, requests are forwarded directly to the provider you choose (e.g., Google, Groq, Mistral, DeepSeek, xAI) under that provider’s own terms and privacy policy. | Varies by provider | Per provider |
Bring-your-own-key routing
When you configure your own model-provider keys (BYOK), your requests are forwarded directly to the provider you select under that provider’s terms. When you use platform-managed model access, requests are routed to model providers we have engaged for that purpose, as reflected above.
Notice of changes
We update this page when we add or replace a subprocessor. As described in our Data Processing Addendum, customers may request advance notification of changes and may object on reasonable data-protection grounds. To subscribe to change notifications or raise an objection, contact privacy@metis.gold.