Last updated: 26 October 2026
ImageWhisperer is provided by Voelspriet, trading as Digital Digging and Image Whisperer.
The core detection models of ImageWhisperer run on our own dedicated hardware in Germany. The companies below process data on our behalf. Each one processes data under its own data processing terms, and only for the purpose listed.
| Subprocessor | Purpose | Data | Location |
|---|---|---|---|
| Hetzner Online GmbH | Server hosting and backup storage | All data processed by the service (as host) | Germany (EU) |
| Google Cloud (Vertex AI / Gemini, Cloud Vision) | Scene understanding, label detection and web matches | The image, processed per request | EU / United States |
| Google Cloud Storage | Encrypted daily backups | Encrypted backup data | Frankfurt, Germany (EU) |
| Sightengine SAS | AI-generation detection (cross-check) | The image, processed per request | France (EU) |
| Hive | AI-generation detection (cross-check) | The image, processed per request | United States |
| Anthropic (Claude) | Backup visual analysis, only when Google Vertex AI is unavailable | The image, processed per request | United States |
| Perplexity AI | Search for earlier publications and fact-checks of an image | A text query only, never the image | United States |
| Cloudflare, Inc. | CDN, firewall and bot protection (Turnstile) | Web traffic in transit, IP addresses | Global network |
| Stripe, Inc. | Payment processing | Email address and payment details (card data never reaches our server) | United States |
| PostHog, Inc. | Product analytics | Anonymised events only, no user identifiers or IP addresses | United States |
| ip-api.com | IP geolocation for abuse detection, country or region level | IP address | Germany (EU) |
This list applies to the free, public service. Paying tenants (enterprise and API customers) choose which services are used for their account and can switch any of them off; their configuration is set out in their contract.
Where a subprocessor processes data in the United States, the transfer is covered by Standard Contractual Clauses or an equivalent safeguard offered by that provider.
Enterprise customers can have individual services switched off for their API key, for example a detection service they already contract directly, or the face-based checks.
We update this page before a new subprocessor starts processing customer data, and inform contractual partners in advance. Questions: [email protected].