2 articles
Sub-processors
The cascade of vendors sitting under your AI provider, and the disclosure obligations that follow them down the stack.
AI Privacy
When you call OpenAI, who actually processes your data? The AI sub-processor cascade
A trace-walk of one OpenAI API call through every entity in the cascade, with the Article 28, CLOUD Act, Article 48, and DMA layers stacked on top.
13 min read
GDPR + AI
A customer asks 'what does your AI know about me?' How to answer an Article 15 request when you ship LLM features
GDPR Article 15 for AI stacks after CEF 2024 and CJEU C-203/22. The copy, the explanation, the sub-processor list, and the one-month clock.
11 min read