trust · 02 · last updated 2026-05-29
Subprocessors.
Every vendor below may process tenant data on our behalf. We notify tenants 30 days before adding a new subprocessor â via the dashboard and the GitHub-watched CHANGELOG.md entry.
17total subprocessors
3LLM / AI
2infrastructure
5observability
| Vendor | Category | Service | Data category | Region | DPA |
|---|---|---|---|---|---|
| Google Cloud (Gemini · Vertex AI · Chirp) | LLM/AI | Primary LLM, embeddings, rerank, voice STT/TTS | Conversation content, KB embeddings, voice audio | Regional routing â EU traffic via europe-west | DPA |
| Anthropic (Claude) | LLM/AI | Alternative LLM + cross-family LLM-as-judge | Conversation content (tenant-opt-in only) | Global; EU customers routed to EU-resident endpoint when available | DPA |
| OpenAI | LLM/AI | Alternative LLM + Computer Use API + gpt-realtime voice | Conversation content (tenant-opt-in only) | Global | DPA |
| Supabase | Infrastructure | Postgres + pgvector + Row-Level Security | Tenant + customer + conversation + audit data | EU â Frankfurt · US â us-east · APAC â Singapore | DPA |
| Upstash | Infrastructure | Redis â rate limiting, session, BullMQ broker | Rate-limit counters, session tokens, queue payloads (no PII) | Multi-region; tenant residency honored | DPA |
| Stripe | Payments | Billing + ROU meter events | Tenant billing data (no end-customer data) | Stripe-managed (US + EU) | DPA |
| SSLCommerz · bKash · Nagad | Payments | Bangladesh payment collection (BD tenants only) | Tenant payment transactions | Bangladesh | DPA |
| Twilio (incl. Verify) | Comms | SMS + WhatsApp + voice SIP + OTP | End-customer phone numbers, conversation content on Twilio channels | Twilio-managed | DPA |
| LiveKit | Comms | Voice agent realtime audio infrastructure | Voice audio streams (transcoded, not persisted) | Tenant-selectable (us · eu · ap) | DPA |
| Resend | Comms | Transactional + agent-reply email | End-customer email + reply content | Global | DPA |
| Postmark | Comms | Inbound email parsing | End-customer email content | US + EU | DPA |
| Zep Cloud | Memory | Conversational memory (opt-in) | Conversation summaries + extracted entities | Configurable per Zep deployment | DPA |
| Langfuse | Observability | LLM observability (OTLP traces) | Sampled prompt + completion text | EU (Frankfurt) when LANGFUSE_HOST is cloud-eu | DPA |
| Sentry | Observability | Production error tracking | Exception stack traces (PII redacted at source) | EU + US | DPA |
| PostHog | Observability | Tenant-dashboard analytics (opt-in) | Page events + feature usage (no end-customer data) | EU + US | DPA |
| PagerDuty | Observability | Critical-incident on-call paging | Alert metadata (no conversation content) | Global | DPA |
| Axiom | Observability | Structured log shipping | Structured app logs (PII redacted at source) | EU + US | DPA |