Sub-processors
Last updated 15 November 2026
SegmentStream Ltd uses the providers below to process Customer Personal Data in providing the Service.
Infrastructure
| Provider | Purpose | Customer data involved | Location |
|---|---|---|---|
| Google Cloud | Data warehouse, file and object storage, secret storage, event collection and data processing | Warehouse data, files, secrets and credentials, collected events | EU or US, by Workspace region |
| Neon, hosted on Amazon Web Services | Workspace databases, sign-in accounts for Customer Applications, file storage | Database records, End User accounts, files | EU (Frankfurt) or US (Ohio), by Workspace region |
| Vercel Inc. | Hosting of Customer Applications and the platform, serverless functions, sandboxes for pipelines and Agents, builds, source archives, logs, Agent sessions, AI gateway | Application traffic, code at build and run time, logs, Agent conversations, prompts and Output | Germany, France, United States |
| Cloudflare, Inc. | Git repository hosting, network delivery, queues | Source code, network traffic | Global |
Services
| Provider | Purpose | Customer data involved | Location |
|---|---|---|---|
| WorkOS, Inc. | Sign-in, organisations and permissions for the platform (we act as controller for this data) | User names, email addresses, organisation membership | United States |
| Resend, Inc. | Sending email for the platform and Customer Applications | Recipient email addresses, email content | United States |
| Functional Software, Inc. (Sentry) | Error monitoring | Error reports, which may contain fragments of request data | European Union |
AI model providers
Used only when you use AI features. You or your Agent choose the model. Requests are routed through the Vercel AI gateway to the provider of that model. The providers below are the ones Workspaces use today. If you select a model from a provider that is not listed, your prompts go to that provider. Model providers process requests in the United States and in the other countries where they operate.
| Provider | Purpose | Customer data involved |
|---|---|---|
| OpenAI | AI model processing | Prompts and Output |
| Anthropic | AI model processing | Prompts and Output |
| AI model processing | Prompts and Output | |
| Microsoft | AI model processing | Prompts and Output |
| Mistral AI | AI model processing | Prompts and Output |
| xAI | Speech to text | Voice messages sent to an Agent |
| TypeSafe AI | Request routing and evaluation models | Prompts and Output |
Messaging
Used only when you connect the channel.
| Provider | Purpose | Customer data involved | Location |
|---|---|---|---|
| Meta Platforms | WhatsApp messaging through our Meta application | Phone numbers, message content | United States and other countries |
What is not on this list
- Third-Party Services that you connect with your own account or credentials, such as your Slack workspace, bank, CRM or ad accounts.
- Coding agents and other tools that you run yourself.
- Providers that process data for which we are the controller. Those are described in our Privacy Policy.
Providers that we use to build and run our own systems, and that do not receive customer data, are also not listed. Examples are our source-code host and our internal secrets manager.
Changes
We give at least 30 days' notice of a new sub-processor by updating this page, except in the urgent cases described in clause 7.2 of the DPA. To be notified by email, write to privacy@segmentstream.com.