Sub-processors
Companies that process data on our behalf. Planned for the pilot; final list confirmed before real client data is allowed.
| Company | What they do | Where | Data they see |
|---|---|---|---|
| Vercel Inc. | Hosts the website and app | Frankfurt, Germany (EU) | Session content passes through while you use the app; nothing is stored |
| EU managed Postgres (provider to be confirmed — see ADR-2/ADR-5) | Database: profiles, clients, transcripts, notes | EU (Germany or France) | All app data, encrypted at rest |
| EU S3-compatible object storage (provider to be confirmed) | Short-lived audio storage (deleted after transcription) | EU (Germany or France) | Audio, for minutes |
| Hetzner Online GmbH | Our speech-to-text servers | Germany or Finland (EU) | Audio and transcripts while processing |
| Amazon Web Services EMEA SARL (Amazon Bedrock — Claude by Anthropic) | AI model that drafts notes and reflections | Frankfurt, Germany (EU region) | Transcript text with pseudonyms; not stored, not used for training |
| Brevo (Sendinblue SAS) | Sends sign-in emails | France (EU) | Your email address only |
During development we use Anthropic's API with synthetic, role-play data only. It is never used for real client sessions.