Legal
Data Processing Addendum
Meridian processes API request payloads on behalf of customers. The following terms summarise our standard data-processing arrangement.
What we process
Request headers, prompt content, and response content for the duration of the API call. Billing metadata (token counts, timestamps, model id) is retained for up to 30 days for reconciliation.
What we never do
We do not train any model on customer prompts. We do not sell or share request content with third parties beyond the upstream provider you have explicitly routed to (Azure, Google, etc.).
Sub-processors
Azure OpenAI / Azure AI Foundry, Google Vertex, Anthropic, Vercel (hosting), Upstash (Redis for session + rate-limit state), SellAuth (payment processing).
Get the signed DPA
A signed DPA is available for Team-tier and partner customers. Email hi@getnimbus.net with your account info and the entity you want listed.