Last updated: June 26, 2026
ReVoice AI AB engages the sub-processors below to deliver the service. We keep customer data within the EU/EEA wherever an EU-resident configuration is available, and rely on the EU Standard Contractual Clauses (and the EU-US Data Privacy Framework where applicable) for any processing that takes place outside the EU/EEA.
| Sub-processor | Purpose | Data | Location | Transfer mechanism |
|---|---|---|---|---|
| Render Services, Inc. | Application hosting, PostgreSQL, Redis | All application data, transcripts, metadata | EU (Frankfurt) | EU-US DPF and SCCs |
| Cloudflare, Inc. (R2) | Object storage | Recordings, media, documents | EU when EU-jurisdiction buckets are used; otherwise automatic placement | EU-US DPF and SCCs |
| OpenAI | LLM, embeddings, transcription, speech | Transcripts, audio, participant names | EU when EU-region projects are enabled; otherwise US | SCCs |
| Deepgram, Inc. | Speech-to-text | Meeting audio | EU when the EU endpoint is enabled; otherwise US | SCCs |
| ElevenLabs, Inc. | Text-to-speech (assistant voice) | Assistant response text | US | EU-US DPF and SCCs |
| Recall.ai (Hyperdoc Inc.) | Meeting recording bot | Meeting audio, video, participants | EU (eu-central-1) | SCCs |
| Stripe, Inc. | Payments and subscription billing | Billing data, customer email | US | EU-US DPF and SCCs |
| Resend (Plus Five Five, Inc.) | Transactional and notification email | Recipient email addresses and content | US | SCCs |
We provide at least 30 days advance notice before engaging a new sub-processor. Questions about this list can be sent to privacy@re-voice.io.