Sub-processors
Everybody who touches data on our behalf, what each one does, and where it is. We tell you before we add one.
Updated 6 Oct 2026
1Always in use
| Sub-processor | What it does | Where | Coachee data? | Transfer safeguard |
|---|---|---|---|---|
| Neon | The database - every record in the product | United States | Yes | US-established; SCCs for EU/UK customer data |
| Vercel | Hosting and the edge network that serves every page | United States | In transit | SCCs + UK Addendum |
| Cloudflare R2 | Object storage for uploads, generated PDFs and documents | United States | Yes | SCCs + UK Addendum |
| Cloudflare | DNS and TLS for the domain | Global edge | No | SCCs + UK Addendum |
| Resend | Transactional email - reminders, confirmations, invoices, notices and session invitations - and, where enabled, receiving a client's Accept / Maybe / Decline reply to an invitation | United States | Names, email addresses and the message itself; never session notes | SCCs + UK Addendum |
| Stripe | Payments. Two separate integrations: your own rail for charging your clients, and ours for charging you | United States / Ireland | Billing data only, never session content | SCCs; Stripe is itself a controller for payment data |
2Used only when you turn a feature on
| Sub-processor | What it does | When | What reaches it |
|---|---|---|---|
| Anthropic | The model behind session summaries, briefings and drafting - and the public site's feature assistant | Only when AI features are enabled for your account. Separately, when a visitor types a question into the feature assistant on our public pages | The text of what you asked it to work on. For the public assistant, the question the visitor typed, with email addresses and phone numbers removed first. Not used for training. |
| Calendar sync and Meet links | Only if you connect a Google account | Session times, titles and attendee email addresses | |
| Microsoft | Outlook calendar sync and Teams links | Only if you connect a Microsoft account | Session times, titles and attendee email addresses |
| Zoom | Meeting links on booked sessions | Only if you connect a Zoom account | Session times and titles |
| Apple (iCloud) | Apple Calendar sync over CalDAV, and the meeting request iCloud may send your client for a session | Only if you connect an Apple calendar | Session times, titles and attendee email addresses |
| AssemblyAI | Speech-to-text behind "Voice record your notes" - a coach's dictated session notes turned into text | Only when AI features are enabled for your account (level 2) and you press the button | The dictation audio, read once from a URL that expires within minutes, and the transcript. Both are deleted from the service the moment the text has been returned to you. United States. AssemblyAI's own terms permit them to use this data to improve their models unless our account has opted out of that program - moving to the plan that allows the opt-out is in progress; this row will say "opted out" once it is done. |
Turning an AI feature off means the text never leaves the platform - not that it leaves and is then discarded. A client can be excluded individually.
3Change notice
We will tell you at least 30 days before a new sub-processor starts handling data, through the in-app News pane and by email. If you object on reasonable data-protection grounds, tell us within that window and we will either find another way or let you leave without penalty for the remainder of a period you have paid for.
4What every one of them is held to
Each sub-processor is under a written contract that binds it to the same obligations we owe you, including confidentiality, security measures, assistance with data-subject requests, and deletion or return at the end. We remain responsible to you for what they do.