Sub-processors
A sub-processor is a third party that processes personal data on our behalf. This list is the authoritative public record. We notify customers at least 30 days before adding or changing a sub-processor.
Active sub-processors
| Vendor | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | Edge compute, CDN, KV storage, R2 object storage, Email Routing, Analytics Engine | Global anycast (US/EU/APAC) |
| Stripe Payments Inc. | Payment processing | US (primary) + EU |
| ConvertKit, LLC (dba Kit) | Email list / marketing automation | US (Tennessee) |
| Resend, Inc. | Transactional email | US (Delaware/AWS) |
| Telegram FZ-LLC | Operator alerts only (no customer PII) | Global |
Conditional sub-processors
Used only if the corresponding feature is enabled or if customer opts in.
| OpenAI, LP (Whisper API) | Voice-to-text transcription (only for customer interviews where consent is given) | US |
| Otter.ai, Inc. | Alternative voice-to-text transcription (operator's choice) | US (AWS) |
Cross-border data transfer
For EU/UK customer data flowing to US-based sub-processors, we rely on the EU Standard Contractual Clauses 2021 incorporated in each sub-processor's Data Processing Agreement. Indian customer data may remain within India when our planned OCI Mumbai backend goes live.
Contact
Sub-processor questions: privacy@eidetic.works