Draft, pending lawyer review. Not yet in force.
Subprocessors
Draft - pending lawyer review. Not yet in force.
[[LEGAL ENTITY NAME - PT Perorangan]] ("Scribewren") uses the vendors below to run the service. We keep this list current and add a vendor here before it touches personal data. See the Privacy Policy for how we use data.
None of these vendors may use your content to train models. Speech-to-text, AI notes and translation run under Zero Data Retention.
Vendors
| Vendor | Entity and location | Purpose | Data processed | Transfer mechanism | Status |
|---|---|---|---|---|---|
| Vultr | The Constant Company, LLC (Vultr), USA; data stored in Singapore, encrypted database backups in the USA (California) | Hosting, database, object storage, transcription workers | All categories, including your content | Vultr DPA, [[CONFIRM SCC / DATA PRIVACY FRAMEWORK STATUS]] | In use |
| Resend | Plus Five Five, Inc. (Resend), USA; emails are sent from its Tokyo (Japan) region | Transactional email | Email address, email content (never transcript content) | Resend DPA with EU Standard Contractual Clauses and UK Addendum, EU-US Data Privacy Framework | In use |
| xAI | X.AI LLC, USA; processing region not contractually guaranteed | Speech-to-text and speaker separation, AI notes and translation | Compressed copy of your audio; returned transcript, word timings and speaker labels. Transcript text, when you request notes or a translation. Zero Data Retention: not retained, not used for training | xAI Data Processing Addendum with EU SCCs and UK Addendum | In use |
| Paddle | Paddle.com Market Ltd, UK, and group companies | Merchant of Record: checkout, payments, tax, invoices | Name, email, billing address, country, payment data, subscription data | Independent controller for payment data; UK adequacy | In use |
| PostHog | PostHog Inc., USA | Product analytics, only with your consent | Pseudonymous ID, events without content, device and browser details | PostHog DPA with Standard Contractual Clauses | In use |
| Sentry | Functional Software, Inc., USA | Error monitoring | Scrubbed stack traces, user ID | Sentry DPA with Standard Contractual Clauses | In use |
| Google (sign-in) | Google LLC, USA | Identity provider for sign-in | Email, name, avatar | Google terms | In use |
| Google Workspace | Google LLC, USA | Support and privacy mailboxes | Support emails | Google Workspace DPA | In use |
| Cloudflare | Cloudflare, Inc., USA and global | DNS, and the CDN that serves this marketing website. Your content never passes through Cloudflare | IP addresses and request metadata of site visitors | Cloudflare DPA | In use |
Changes
- 2026-10-17: hosting, database, object storage and transcription workers are now at Vultr, email is sent through Resend, and AI notes and translation run at xAI. Cloud and AI vendors that no longer process personal data have been removed from the list.
If we add a vendor that processes personal data, we update this page first. Questions about this list go to [email protected].