Legal
Subprocessors
Last updated
uses the following providers to run . Each processes data only on our instructions and under a data processing agreement. We will update this page, and email developers who have asked for notice, at least 30 days before adding a subprocessor that processes End User conversation data.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Cloudflare, Inc. | API gateway, agent sessions, AI models (Workers AI), speech-to-text, standard text-to-speech, databases, reconnect storage, website hosting | Account data, agent configurations, End User audio (in memory), transcripts, summaries, prompts and replies | Global network (requests are processed near the user) |
| Fly.io, Inc. | Premium text-to-speech servers | Text of agent replies and voice data, in memory and in suspended-server memory snapshots (see the Privacy Policy) | United States |
| Google LLC (Firebase, Google Cloud) | Developer sign-in; storage of speech engine software images | Developer account email and sign-in data. No End User data. | United States |
| Stripe, Inc. | Payments | Developer billing and payment details. No End User data. | United States |
AI models offered through Ciabatta (for example Google Gemma, Meta Llama, OpenAI gpt-oss or DeepSeek models) run on Cloudflare's infrastructure. The organizations that published those models do not receive your data.
Tool calls and webhooks send data to endpoints the developer configures. Those endpoints belong to the developer and are not our subprocessors.