Skip to content
Gaincraft

Trust Center · Subprocessors

Every third party that touches your data, and exactly what it touches.

A real table rather than a statement that we use industry-standard providers. Entries still marked for confirmation are ones we will not state until the contract terms are signed and verifiable.

Material changes to this list are notified in advance under the DPA.

Current list

Subprocessor, purpose, data category, region.

SubprocessorPurposeData categoryRegion
Amazon Web ServicesPrimary hosting, storage and compute for the platformAudio, transcripts, behaviour scores, account dataUS (us-east-1) or India (ap-south-1), per account residency selection
CloudflareEdge delivery, TLS termination and DDoS protectionRequest metadata and IP addresses. No audio or transcript content at restGlobal edge, terminating into the selected residency region
[CONFIRM: speech-to-text provider]Speech-to-text transcription of captured audioAudio and resulting transcripts, post-redaction where redaction is pre-transcription[CONFIRM: processing region and whether zero-retention terms are in place]
[CONFIRM: LLM provider]Behaviour scoring and coaching prompt generationRedacted transcripts and behaviour definitions. No audio[CONFIRM: processing region, zero-retention and no-training terms]
PostmarkTransactional email — daily prompts, digests and account notificationsName, work email, and prompt content in the email bodyUnited States
SentryApplication error monitoringError traces and technical metadata. Scrubbed of conversation contentUnited States
[CONFIRM: identity provider integration]Single sign-on and directory provisioningName, work email, role and group membership[CONFIRM]

No subprocessor on this list is permitted to use your data to train its own models, and none receives audio except where the purpose column says so explicitly.

Questions from your security team?

Send them to us directly. We would rather answer a questionnaire early than discover a blocker at contract stage.

We use cookies necessary to run this site. Analytics cookies help us see which pages get read, and they load only if you accept. No advertising or cross-site tracking, ever. See our Privacy Policy.