Consilium Community
Home Sign in
Trust & Privacy

Sub-processors

Last updated: 3 August 2026

A sub-processor is a third party that processes personal data on our behalf to help us run Consilium. This page lists the sub-processors we use, as referenced in our Privacy Policy. We remain responsible to you for how these providers handle your data.

We require every sub-processor to: process your Content only to provide the Service and only on our instructions; maintain appropriate security safeguards; and not use your Content to train their own models.

Core infrastructure

ProviderPurposeData processedPrimary location
OpenRouter
AI gateway
Routes your prompts to the AI models that generate and verify answers. Your Inputs and generated Outputs. United States
Render Services, Inc.
Application hosting
Runs the Consilium application. Account, usage, and request data in transit; server logs (kept up to 90 days). United States — Oregon (us-west)
Neon Inc.
Database hosting
Stores your account and conversation history. Account data and Content at rest (encrypted). United States — AWS us-east-1 (N. Virginia)
Google
Transactional email (Gmail SMTP)
Sends email-verification codes and payment / refund correspondence. Your email address and the notification content (never your questions). United States

Payments

ProviderPurposeData processedPrimary location
Moyasar Financial Company
Payment processing — licensed by the Saudi Central Bank · privacy policy
Processes credit purchases on its own hosted payment page when you choose to buy credits. Payment details (card / mada / Apple Pay) are entered on and processed by Moyasar directly — Consilium never receives or stores your full card number or CVV. We store the credits purchased, the amount, the payment status, and Moyasar's transaction reference, and we may receive limited metadata (payment-method type, last four digits) needed to record the transaction. Purchase records are retained for 10 years (see the Privacy Policy). Saudi Arabia

AI model & search providers

To produce an answer, your Content is sent (through OpenRouter) to AI model providers, and — when web search is enabled — to a search/verification provider. Which providers receive your Content depends on the panel and lead model you select for each question, so the list below shows the providers that may be involved rather than a fixed set.

Live default panel: deepseek/deepseek-v4-pro, openai/gpt-5-mini, minimax/minimax-m2.5, perplexity/sonar, qwen/qwen3.6-35b-a3b — lead: deepseek/deepseek-v4-pro — fact-check verifier: perplexity/sonar-reasoning-pro — members may change the panel and lead per question in the app; the models you actually selected are always shown before you ask.

No-training and zero-data-retention routing. All model traffic is routed through OpenRouter with a no-training policy (data_collection: deny) and strict zero-data-retention routing (zdr: true): inference requests are sent only to endpoints that do not retain your prompts, and models without such an endpoint are not selectable. Note: zero-data-retention applies to model inference; the web-search tool used during fact-checking is governed by the search provider's own retention policy.

ProviderPurposeData processedPrimary location
Anthropic (Claude)Generates / evaluates / synthesizes answersYour Inputs and OutputsUnited States
Google (Gemini)Generates / evaluates / synthesizes answersYour Inputs and OutputsUnited States
Perplexity (Sonar)Verification & web-search source retrievalYour query, and search terms derived from itUnited States
DeepSeekGenerates / evaluates answersYour Inputs and OutputsChina
Moonshot AI (Kimi)Generates / evaluates answersYour Inputs and OutputsChina
Other providers you selectGenerate / evaluate answers when chosen for your panel or lead (e.g. OpenAI, Mistral, xAI, Alibaba/Qwen, Z.ai, MiniMax)Your Inputs and OutputsVarious (US, EU, China, others)
Because delivering your answer requires these providers, your Content is processed outside Saudi Arabia. We carry out these transfers because they are necessary to provide the Service you requested, we disclose them clearly here and in the Privacy Policy (International Data Transfers), and we apply the safeguards described there — minimum-necessary data, no-training routing, and an internal register of every transfer path. Processing may occur in various countries; a provider's primary location above is indicative, not a guarantee of where every operation runs. Using the Service does not waive any right you have under the law.

Changes to this list

We may add, remove, or replace sub-processors as Consilium evolves. This page always reflects our current sub-processors, and we will communicate material changes as described in the Privacy Policy.

← Privacy Policy  ·  Terms of Service