Effective Date: 28 April 2026 Last Updated: 28 April 2026
This list identifies every third-party sub-processor that processes Personal Data on our behalf in connection with the Service. We update it whenever we add or remove a sub-processor.
| Sub-processor | Service provided | Categories of data | Storage location | Transfer safeguard |
|---|---|---|---|---|
| Anthropic, PBC (anthropic.com) | LLM-based script-routing matcher | Last prospect utterance text, your script node identifiers (no audio, no recording) | United States | SCCs + DPA |
| Deepgram, Inc. (deepgram.com) | Real-time speech-to-text transcription | Audio stream (in flight; not stored by us) | United States | SCCs + DPA |
| Supabase, Inc. (supabase.com) | Account, license, subscription, analytics storage | Email, hardware fingerprint hash, subscription records, usage events | Ireland (EU) | DPA + SCCs (EU host) |
| Stripe Payments Europe Ltd (stripe.com) | Payment processing, customer portal, billing | Email, payment method, billing address, transaction history | EU + global | DPA + SCCs |
| Resend, Inc. (resend.com) | Transactional and lifecycle email delivery | Email address, email content, delivery metadata | United States / EU | SCCs + DPA |
| GitHub, Inc. (github.com) | Distribution of app updates and release artifacts | Anonymous download metadata | Global CDN | DPA |
| Sentry / Functional Software, Inc. (sentry.io) | Error monitoring and crash reporting | App version, OS version, error stack traces (with PII redaction) | United States | SCCs + DPA + redaction |
| Vercel, Inc. (vercel.com) | Website hosting | Anonymous request logs, IP-derived country | Global edge network | DPA + SCCs |
| Cloudflare, Inc. (cloudflare.com) (where applicable) | DNS, edge protection | Anonymous request metadata | Global edge network | DPA + SCCs |
| Apple Inc. (apple.com) | App distribution, code signing, notarization (for our macOS app) | Anonymous notarization metadata | United States | DPA + SCCs |
We will add to this list any new sub-processor that materially affects how Personal Data is processed, and we will notify you at least 14 days in advance via email or in-app notification.
All four documents are governed by the laws of England and Wales.