Back to home
vidivici

Sub-processors

Last updated: November 15, 2026 — version 1.1

1. What this list is

To operate vidivici we rely on third-party providers that process user data on our behalf (compute, storage, AI, messaging). This page lists each one, the role it plays, and the region where it operates. It serves a dual purpose:

  • Transparency for end users — anyone can see whom we share data with.
  • B2B auditability — legal and security teams at customer organizations often require this list to validate compatibility with their own internal policies, GDPR, SOC 2, etc.

If we add, remove or change a sub-processor we update this page and notify active users by email at least 30 days before material changes take effect.

Changes in version 1.1: we corrected the Anthropic description (it also processes images); added Voyage AI, Expo and browser push services, which were already in use and missing from version 1.0; and replaced "Cloudflare R2", which we do not use, with Cloudflare's actual role (DNS and email).

2. Current list

  • Supabase (PostgreSQL, Storage, Auth and Edge Functions) — primary database, account authentication, photo storage, temporary storage of recording audio while it is transcribed, and server-side functions. Region: USA.
  • LiveKit Cloud — real-time audio/video routing during calls and server-side transcription per participant. To transcribe, LiveKit sends call audio to Deepgram through its LiveKit Inference service. Region: USA.
  • Deepgram — speech-to-text over call audio (through LiveKit) and over walkthrough and meeting recordings (directly). Region: USA.
  • Anthropic (Claude) — (1) summaries, titles and action items from transcripts and notes (text); (2) analysis of photos and video frames captured during sessions, for the summary and for risk detection (vision); (3) the AI assistant, which receives your questions together with excerpts of your sessions, transcripts, notes and action items in order to answer them. No audio is sent to Anthropic.
  • Voyage AI — generates numerical representations (embeddings) of the text of your action items (title and description) and of your questions to the assistant, so the assistant can search your history.
  • Expo (650 Industries) — relay service that delivers mobile app push notifications to Firebase Cloud Messaging and Apple Push Notification Service. It receives the title and body of each notification, which may include people's names and session or task titles. Starting with version 0.8.21 of the Android app, it also distributes app updates: when it opens, the app checks for a new version by sending its IP address, platform, installed version and a random installation identifier that is not linked to your account.
  • Google Firebase Cloud Messaging — push notification delivery to Android devices, including incoming-call notifications, which we send directly.
  • Apple Push Notification Service — push notification delivery to iOS devices.
  • Browser push services (Google, Mozilla, Apple or Microsoft, depending on your browser) — deliver web panel notifications if you enable them. Notification content is end-to-end encrypted and these services cannot read it.
  • Resend — transactional emails (welcome, team invitations and notices, account deletion confirmations, waitlist confirmation).
  • Sentry — error telemetry for the app, the website and server-side functions. Configured to NOT send user content (notes, transcripts, photos).
  • Vercel — hosting for the vidivici.ai website and web panel; processes requests from users who sign in to the panel.
  • Cloudflare — DNS for the vidivici.ai domain and forwarding of email we receive at our @vidivici.ai addresses (Email Routing).

3. International transfers

All active infrastructure today resides in the United States. For international data transfers we rely on the data processing agreements (DPAs) each provider includes in its terms of service, which incorporate the European Commission's Standard Contractual Clauses or other transfer mechanisms where applicable.

4. Individual provider policies

Each sub-processor has its own privacy policy and terms of service. We recommend reviewing the ones relevant to your use case:

5. Contact

Questions about sub-processors, due diligence or DPAs: hola@vidivici.ai.

Spanish version available at vidivici.ai/legal/sub-procesadores.