Sub-processors
Grido AB engages the following sub-processors to help us operate the Grido Health Companion App. We design our stack for EU/EEA data residency: Swedish company, EU-hosted AI, and primary storage in the EEA — not US data centres or transatlantic model routing for your health-related processing. This list is kept current. We update it whenever we add, change, or remove a sub-processor.
Last updated: April 2026
AI / Large Language Model Processing
| Sub-processor | Role | Processing location | Safeguards |
|---|---|---|---|
| Mistral AI | LLM inference (API / enterprise) for in-app educational responses; pseudonymised payloads only | European Union / EEA (Mistral-hosted infrastructure) | DPA under GDPR; no training on customer data; zero / minimal retention per agreement; processing remains in the EU/EEA |
All AI-powered features that send pseudonymised content for language model processing use Mistral AI in the EU/EEA. We do not route those requests to US-based LLM providers.
Infrastructure and Operations
Additional sub-processors provide cloud hosting, databases, analytics, email delivery, and related services. They process data only on our instructions under data processing agreements, and we select EU/EEA regions for primary workloads where available. Account data and encrypted health data are stored in the EEA as described in our Privacy Policy. Specific entity names and regions are listed in our sub-processor register and may be shared on request at [email protected].
Notifications
Users are notified of material changes to this sub-processor list via the App or by email at least 30 days before the change takes effect, where feasible.
Contact
Questions about sub-processors: [email protected]