Legal · draft
Sub-processors
Draft of 2026-10-22, prepared for review. Not in effect.
These providers process personal data on our behalf. Providers marked “Planned” are part of the product design but receive no data today. We will list a new provider here before it receives customer data.
| Provider | What for | Data | Location | Status |
|---|---|---|---|---|
| Cloudflare, Inc. | Hosting of the portal, widget, dashboard and website; content delivery; DNS; storage of uploaded images and logos | All content served or uploaded, request metadata including IP addresses | Global network; storage location [to confirm] | In use |
| [Server hosting provider — to confirm] | Servers that run the UpVoiced API, background jobs and database | All workspace and end-user data stored by UpVoiced | Helsinki, Finland (EU) [production location to confirm] | In use |
| Clerk, Inc. | Sign-in and accounts for workspace team members (not for your end users) | Team members’ names, email addresses and sign-in data | United States | In use |
| Resend (Plus Five Five, Inc.) | Sending sign-in codes, notifications and update emails | Recipient email addresses and email content | United States | In use |
| PostHog, Inc. | Product analytics for the dashboard and this website; never on portals or the widget | Pseudonymous identifiers and usage events, without IP addresses or location | United States | In use |
| Ahrefs Pte. Ltd. (Ahrefs Web Analytics) | Cookieless visit counts for this website only (upvoiced.com); never on portals, the widget or the dashboard | Page path and campaign tags, page title, referring page, screen size and browser language; the IP address and browser type, which Ahrefs uses for country/city and a daily-salted visitor count and states it does not store | Singapore (company); processing location [to confirm] | Planned, no data yet |
| Grafana Labs | Operational monitoring: error logs and request traces | Technical logs; URLs, query strings, client addresses and user fields are removed first | [to confirm] | In use |
| Paddle.com Market Limited | Reseller and merchant of record for paid plans: checkout, payments, invoices and tax | Billing contact, payment and tax details (collected directly by Paddle) | United Kingdom | Planned, no data yet |
| Anthropic, PBC | AI suggestions such as triage and changelog drafts (switched off today) | Post and changelog text, with names and email addresses removed | United States | Planned, no data yet |
| Google LLC (Places API) | Importing public reviews as testimonials (not built yet) | Business names and public review text | United States | Planned, no data yet |
Paddle acts as our reseller and merchant of record: for payment details it is an independent controller under its own privacy notice.