Sub-Processor List
v1.2Last updated: 2026-08-19
This page lists the Sub-Processors engaged by Jan Hammer, trading as Hammer Creations under the brand "3D AI Studio" ("Provider"), to deliver the API services described in the API Terms of Service.
The Customer grants the Provider general authorisation within the meaning of Article 28(2) GDPR to engage these Sub-Processors. Changes to this list are subject to the notice and objection procedure described in Section 10(3) of the API Terms of Service.
For each Sub-Processor that processes personal data outside the European Economic Area, the "Transfer mechanism" field states the adequacy decision or the safeguard pursuant to Article 46 GDPR on which the transfer is based (Article 13(1)(f) GDPR). A copy of the applicable safeguards can be requested via the contact address on this page.
For questions regarding Sub-Processors or data processing, contact: Jan@3DAIStudio.com.
AI Model Inference
Sub-Processors that execute AI model inference to generate images, 3D models, and other content in response to API requests. Customer Input (images, text prompts, and 3D model files) may be transmitted to these providers for processing. inference.sh and FAL.ai may engage further sub-processors of their own to provide the underlying model services.
Tencent Cloud Europe B.V.
Purpose
3D model generation
Processing Location(s)
Transfer Mechanism
Standard Contractual Clauses (provider DPA)
Inference Shell Inc. (inference.sh)
Purpose
AI image generation and editing
Processing Location(s)
Transfer Mechanism
Standard Contractual Clauses (provider DPA)
Features & Labels, Inc. (FAL.ai)
Purpose
AI image generation and editing
Processing Location(s)
Transfer Mechanism
Standard Contractual Clauses (provider DPA)
Modal Labs, Inc.
Purpose
3D model generation and 3D file processing
Processing Location(s)
Transfer Mechanism
Standard Contractual Clauses (provider DPA)
OpenAI Ireland Ltd.
Purpose
Miniature scale estimation through the Responses API
Processing Location(s)
Transfer Mechanism
Standard Contractual Clauses (provider DPA)
Holymolly Ltd (Tripo AI by VAST), Hong Kong SAR
Purpose
3D model generation and processing
Processing Location(s)
Transfer Mechanism
Standard Contractual Clauses (provider agreement)
Deemos Corporation (Hyper3D / Rodin), Wilmington, Delaware, United States
Purpose
3D model generation and processing
Processing Location(s)
Data Storage
Files uploaded to or generated through the public API are retained for 24 hours and then permanently deleted.
Cloudflare, Inc.
Purpose
Temporary object storage for files uploaded to or generated through the public API
Processing Location(s)
Transfer Mechanism
EU-US Data Privacy Framework (adequacy; Cloudflare, Inc. is certified); Standard Contractual Clauses in the provider DPA as fallback
Payment Processing
Sub-Processors that handle payment transactions for Credit purchases. The Provider does not store payment card details.
Stripe Payments Europe, Limited
Purpose
Payment processing for API Credit purchases
Processing Location(s)
Transfer Mechanism
EU-US Data Privacy Framework (adequacy; Stripe, Inc. is certified); Standard Contractual Clauses in the provider DPA as fallback
Hosting & Infrastructure
Sub-Processors that provide the infrastructure on which the API, its databases, and the API Dashboard are hosted.
Hetzner Online GmbH
Purpose
API, database, and infrastructure hosting
Processing Location(s)
Transfer Mechanism
No third-country transfer (EEA-only processing)
Vercel Inc.
Purpose
API Dashboard hosting and web analytics
Processing Location(s)
Transfer Mechanism
EU-US Data Privacy Framework (adequacy; Vercel Inc. is certified)
Analytics, Monitoring & Error Tracking
Sub-Processors used for usage analytics, application monitoring, error tracking, and performance analysis.
Functional Software, Inc. (Sentry)
Purpose
Error tracking and application monitoring
Processing Location(s)
Transfer Mechanism
EU-US Data Privacy Framework (adequacy; Functional Software, Inc. is certified); Standard Contractual Clauses in the provider DPA as fallback
PostHog Inc.
Purpose
API analytics and reliability monitoring
Processing Location(s)
Transfer Mechanism
Standard Contractual Clauses (provider DPA); PostHog Inc. is additionally certified under the EU-US Data Privacy Framework
New Relic, Inc.
Purpose
Application performance monitoring
Processing Location(s)
Transfer Mechanism
EU-US Data Privacy Framework (adequacy; New Relic, Inc. is certified); Standard Contractual Clauses in the provider DPA as fallback
Google Ireland Limited (Google Analytics / Tag Manager)
Purpose
API Dashboard usage analytics and tag management
Processing Location(s)
Transfer Mechanism
EU-US Data Privacy Framework (adequacy; Google LLC is certified)
Communications
Sub-Processors used for transactional email delivery (e.g., account notifications, terms update notices).
Twilio, Inc. (SendGrid)
Purpose
Transactional email delivery
Processing Location(s)
Transfer Mechanism
EU-US Data Privacy Framework (adequacy; Twilio Inc. is certified); Binding Corporate Rules
Plus Five Five, Inc. (Resend)
Purpose
Transactional email delivery
Processing Location(s)
Transfer Mechanism
EU-US Data Privacy Framework (adequacy; Plus Five Five, Inc. is certified); Standard Contractual Clauses in the provider DPA as fallback
Change Log
End of Sub-Processor List · v1.2 · 2026-08-19