Subprocessors
Companies that handle personal data on our behalf, and what for. We update this page before adding one.
Draft. This text describes what the service does today and has not yet been reviewed by a lawyer. Names, addresses and anything in [square brackets] are filled in before launch.
Last updated 2026-10-24.
| Company | Purpose | Data | Status |
|---|---|---|---|
| Supabase | Sign-in and the database that stores workspaces | Account email and sign-in records; all workspace content | In use [region to confirm] |
| [Application hosting provider] | Runs the web app and the API | Requests in transit; no stored content beyond the database | To confirm before launch |
| [Object storage provider] | Stores uploaded recordings | Recordings you upload | To confirm before launch |
| AI model providers (selected from Anthropic, OpenAI, Google and DeepSeek) | Read conversations, answer questions, draft messages, label feelings | Customer text and what is needed to answer; not used to train models | The providers in use at launch are listed here when confirmed |
| OpenAI (embeddings) | Compare statements and quotes by meaning | Short pieces of customer text | Only if meaning search is switched on |
| AssemblyAI | Turn recordings into transcripts | Recordings; deleted at the provider after transcription | Only if that provider is selected |
| Resend | Send the email you approve, invitations and account email; receive bounce reports | Recipient addresses and message text | In use at launch |
| Stripe | Take payment for paid plans | Billing contact and payment details (held by Stripe) | In use at launch |
| [Error and alert channel] | Tell us when something breaks | Identifiers and error text; no customer content | To confirm before launch |
Services you connect yourself
When a workspace admin connects Slack, an issue tracker (GitHub, Linear, Jira, ClickUp, Asana, Azure DevOps), a CRM (HubSpot, Salesforce) or a chat channel for notifications, that service receives only what the connection is for (for example an issue title and counts, never customer quotes, names or emails), under that customer's own account with it. These are the customer's choices, not our subprocessors.
Changes
Account holders are told before a new subprocessor starts handling their data, and can object within that notice period.