Subprocessors
Version 2026-08-28 · Last updated 28 August 2026
Every third party that can touch customer data. Enterprise security reviews always ask.
Shared tier
Customers on the shared processing tier have their audio processed by the providers below. Which ones apply depends on the configuration of your account; the defaults are marked.
- Deepgram (United States) — speech recognition, default provider. Receives audio streams. Audio is processed and not retained for training under our agreement; where a regional endpoint is configured for an account, processing happens in that region.
- OpenAI (United States, EU endpoint available) — machine translation, default provider, and speech synthesis when you switch dubbing on. Receives transcribed and translated text, never your audio; when dubbing is on it returns synthesised audio, which is played and discarded. Content submitted through the API is not used for training.
- Anthropic (United States) — machine translation, where selected for an account. Receives transcribed text, never audio.
- DeepL (Germany) — machine translation, where selected for an account. Receives transcribed text, never audio. We use the paid API only: the free tier permits the provider to use submitted texts, which would not be acceptable for user speech.
Local tier
Customers on the local processing tier have no AI subprocessors: speech recognition and translation run on infrastructure we operate. Only the infrastructure and support providers below apply.
All customers
- Hetzner / Hetzner Online GmbH (Germany, EU) — application hosting and databases.
- Paddle.com Market Ltd (United Kingdom) — merchant of record: sells the hour packs, takes payment, calculates tax and issues invoices. Receives your billing data as an independent controller for those purposes, and never receives audio or transcripts.
- Resend / Postmark (United States) — transactional email. Receives email addresses and the content of the messages we send you. Normally that content is account notices; if you switch on conversation recaps, it also includes the AI summary of each conversation that ends.
Changes
We give 30 days notice before adding a subprocessor. DPA customers may object; if we cannot resolve the objection, you may terminate the affected service without penalty.
Retention and regional settings above describe what our agreements and account configuration provide at the date of this page. Where a stricter arrangement (for example zero data retention) has been agreed for a specific account, it is stated in that account’s contract rather than here.
Subscribe to changes at [email protected].