Sub-processors

Last updated: 22 April 2026

We engage a small set of trusted vendors to help us operate the Service. This page lists every Sub-processor that handles Customer Data. It is the authoritative list referenced in our Data Processing Agreement.

We notify all customers via email at least 14 days before adding a new Sub-processor. Customers may object within 30 days of notification. Subscribe to changes by followingsubprocessors.xml.

Active sub-processors

VendorPurposeCountrySince
Supabase, Inc.Managed Postgres database, authentication, storage, and realtime.USA (EU region data residency)2024
Vercel, Inc.Web application hosting and edge delivery.USA / Global CDN2024
Railway Corp.Container hosting for the Python MCP server.USA2024
Anthropic, PBCAI models for review drafting, tone detection, and brand-voice learning.USA2024
Twilio, Inc.SMS delivery for review requests and booking reminders.USA (regional routing)2024
SendGrid (Twilio)Transactional email and digest delivery.USA2024
Stripe, Inc.Subscription billing, invoicing, and payment processing.USA / Ireland2024
Upstash, Inc.Redis — rate limiting and background job queue.USA (EU region data residency)2024
Sentry.io (Functional Software)Error monitoring and performance tracing.USA2024
Google LLCGoogle Business Profile OAuth + Places API (customer-authorised).USA2024
Cloudflare, Inc.Turnstile CAPTCHA and DNS.USA / Global2024
ElevenLabs, Inc.Voice AI for missed-call agent (Dominator tier only).USA2025
VapiAlternative voice provider for missed-call agent.USA2025

International transfers

Where personal data is transferred out of the UK or EEA, we rely on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses as described in the DPA.

Changes

Changes to this list are announced by email to customer admin contacts at least fourteen (14) calendar days before they take effect.