Red Table uses the third-party service providers below to process personal data on our behalf. For each we disclose the vendor, our purpose, the categories of personal data involved, and the processing region. Regions marked “region under review” are being confirmed with the provider and are not asserted until verified.
| Sub-processor | Purpose | Data categories | Region |
|---|---|---|---|
| Neon (Postgres database + Neon Auth) | Primary database hosting (accounts, sessions, transcripts, usage) and the current identity provider. | Account identity (email, name), session metadata, transcript text, usage records. | region under review (serverless; migration to Supabase pending #258) |
| Supabase (auth backend — planned) | Authentication backend (GoTrue), selectable behind a flag; the planned migration target for database + auth (#258). | Account identity (email, name). | planned — not yet processing production data |
| Google Cloud (Cloud Run, Cloud Logging, Secret Manager, Cloud TTS) | Application hosting and runtime, operational logs, secret storage, and fallback speech synthesis. | Request/operational logs, transient audio for synthesis; no durable transcript store. | United States (us-east1) |
| Deepgram | Real-time speech-to-text of the interpreter’s audio. | Interpreter audio stream and derived transcript text. | United States |
| DeepL | Primary translation of transcript text between languages. | Transcript text. | European Union |
| Microsoft Edge-TTS | Primary text-to-speech synthesis of translated text. | Translated transcript text. | region under review |
| Anthropic | Optional AI meeting summaries (Claude). | Transcript text submitted for summarization. | United States |
| Resend | Transactional and CASL-compliant campaign email delivery. | Email address and message content. | United States |
| Sentry | Application error and performance monitoring. | Error diagnostics, which may incidentally include limited identifiers. | region under review |
| Google Analytics 4 | Website usage analytics on the marketing pages (consent-gated). | Device / usage analytics (only after consent is granted). | Global (Google infrastructure) |
| Paddle (payments — pending) | Merchant-of-record payment processing for paid plans (#238). | Billing details (name, email, payment token). | planned — not yet processing production data |
This page is a disclosure only. Our processing terms with each vendor are recorded internally; questions about data processing can be directed through our Privacy Policy.
Effective version: 2026-07-06