Legal · transparency
Subprocessors
We process personal data with help from a small set of trusted vendors. This list is the canonical record under UK GDPR / EU GDPR Article 28 and California Civil Code §1798.140(ag). Updated as we add or remove vendors.
| Provider | Purpose | Country | DPA | |
|---|---|---|---|---|
| Anthropic PBC | Claude AI models (via OpenRouter) | Prompts processed for model output | US | Pending / Standard |
| Cloudflare Inc. | CDN, DDoS, bot detection (Turnstile) | IP addresses, browser metadata, request data | US | Signed |
| DeepSeek AI | LLM models (via OpenRouter) | Prompts processed for model output | CN/US | Pending / Standard |
| Functional Software (Sentry) | Error monitoring | Error stack traces, pseudonymous user IDs, session data | US | Pending / Standard |
| Google LLC (Translate API free endpoint) | Backup translation when OpenRouter unavailable | UI strings only — never user-generated data | US | Pending / Standard |
| ImprovMX | Inbound email forwarding (hello@/support@/team@) | Email addresses, message routing metadata | US | Pending / Standard |
| Inworld AI | Voice synthesis for assistants | Voice text, voice characteristics | US | Pending / Standard |
| OpenAI Inc. | GPT models (via OpenRouter) | Prompts processed for model output | US | Pending / Standard |
| OpenRouter Inc. | LLM gateway (translation + AI features) | Prompts, translations, language metadata | US | Pending / Standard |
| Railway Corp. | Application + worker hosting | IP addresses, request logs, encrypted environment variables | US | Signed |
| Replicate Inc. | Avatar / 3D model generation pipelines (image-to-GLB) — Hunyuan, TRELLIS, Tripo, Meshy. | Source images you submit for avatar generation; generated GLB outputs. | United States | Pending / Standard |
| Sinch Email (Mailgun) | Outbound transactional email | Email addresses, message bodies, delivery telemetry | US/EU | Signed |
| Stripe Inc. | Payment processing + Connect payouts | Card data (PCI scope), billing addresses | US/IE | Signed |
| Supabase Inc. | Database hosting, authentication, realtime, storage | Account data, profile data, content, identifiers, telemetry | IE | Signed |
| Twilio Inc. | SMS for OTP + alerts | Phone numbers, SMS message bodies | US | Pending / Standard |
Data residency
Primary database + storage live in Supabase Ireland (eu-west-1). Outbound emails route via Mailgun EU. Some AI inference (OpenRouter, model providers) happens in the US under standard contractual clauses.
Notification of changes
We update this page whenever we add a new subprocessor. For substantive changes affecting data flows, signed-in users get an in-app notice. To get email updates, contact support@futureassistants.co.uk.
See also: Privacy · Terms · Platform charter