Skip to main content
← Back to Transkripsie

Sub-processors

Last updated: June 6, 2026

To run Transkripsie, we rely on a small number of vetted third-party service providers (“sub-processors”) that process personal data on our behalf and under our written instructions. Each sub-processor is bound by contractual obligations of confidentiality, security, and lawful international data transfer (including EU Standard Contractual Clauses and the UK International Data Transfer Addendum where applicable).

We will give at least 30 days’ advance notice before adding or replacing a sub-processor that processes personal data. To subscribe to change notifications, email privacy@transkripsie.com with the subject line “Subscribe: sub-processor updates”.

Current sub-processors

Sub-processorPurposeAI purposeLocationData shared
Hetzner Online GmbHPrimary application hosting, database, and object storage—Germany / Ashburn, VA, USAAll account data, audio, transcripts, summaries, and voiceprints (encrypted at rest)
Recall.ai, Inc.Meeting bot infrastructure for Google Meet, Zoom, Microsoft Teams, and WebexCaptures and relays live meeting audio/video for downstream speech recognition (does not generate AI output)USAMeeting join URL, bot session metadata, and the live meeting audio/video stream during recording
Soniox, Inc.Speech-to-text transcription (batch uploads and live streaming)Automated speech recognition and speaker diarisationUSAAudio sent for transcription. Provider is contractually prohibited from training models on customer audio and from retaining content beyond the processing window
OpenRouter, Inc.Primary generative-AI routing layerSummaries, chapter headings, meeting titles, chat responses, and translationUSATranscript text submitted for AI processing. No training on customer data
xAI Corp.Fallback generative-AI providerSummaries, meeting titles, chat responses, and translation when OpenRouter is unavailableUSATranscript text submitted for AI processing. No training on customer data
Anthropic, PBCFallback generative-AI providerSummaries, meeting titles, chat responses, and translation when OpenRouter and xAI are unavailableUSATranscript text submitted for AI processing. No training on customer data
Zoho CorporationTransactional email delivery (sign-up, password reset, security alerts, receipts)—India / NetherlandsRecipient email address, name, and message content
Google LLCGoogle Calendar integration (only for users who connect a Google account)—USAOAuth tokens and calendar event metadata (title, time, attendees, conferencing link)
Backblaze, Inc.Encrypted off-site backups (B2 object storage)—USAGPG AES-256–encrypted database and audio snapshots; per-run manifest JSON. Encryption keys held by Transkripsie — Backblaze cannot read backup contents
Stripe, Inc.Payment processing (when billing is enabled on your account)—USAName, email, billing address, and payment method tokens. Full card numbers are not transmitted to or stored by Transkripsie
Functional Software, Inc. (Sentry)Application error monitoring and performance tracing—USAStack traces, request paths, and diagnostic metadata. PII is scrubbed before transmission; no audio or transcript content
Healthchecks.ioBackup and restore-drill job monitoring—GermanyPing metadata only (daily backup and monthly restore-drill start/success/fail signals). No customer content
ThreadchatOptional RAG integration (only for users who link a Threadchat account)Optional transcript indexing for retrieval-augmented search (user-initiated integration only)Varies (per-user VPS)Transcript text, summaries, and metadata pushed for search/RAG indexing when the integration is enabled

Notes

  • The speech recognition provider is Soniox, Inc. (USA). Soniox operates under a written data-processing agreement that prohibits training on customer audio and limits retention to the processing window.
  • Generative-AI features are routed primarily through OpenRouter, Inc., with xAI Corp. and Anthropic, PBC as contractual fallbacks. None of these providers may train on customer transcript content.
  • Stripe is engaged only when billing is enabled on your account. If you have a free account, no data is shared with Stripe.
  • Google is engaged only if you choose to connect Google Calendar. If you do not connect a Google account, no data is shared with Google through Transkripsie.
  • Backups stored with Backblaze B2 are encrypted client-side (GPG AES-256) before upload; encryption keys are held by Transkripsie. Backblaze cannot read backup contents. B2 Object Lock provides an immutable retention window against accidental or malicious deletion.
  • Sentry receives scrubbed error diagnostics only — not audio, transcripts, or passwords.
  • Threadchat is engaged only if you explicitly link a Threadchat account for RAG search. Otherwise no data is shared with Threadchat.

Related

Last updated June 6, 2026. To subscribe to changes, email privacy@transkripsie.com.