BriefVox AI Subprocessors and Vendors Registry
1. Purpose of this registry
This registry tracks who BriefVox AI entrusts or shares data with in the course of providing the service. The document must be updated whenever a vendor changes.
2. Registry
Vendor
Service
Data
Role
Location
DPA/SCC
Status
Stripe
payments, invoices, subscriptions
payment data, email, transaction identifiers
processor / independent controller for certain services
Irlandia (Stripe Payments Europe Ltd., Irlandia; Stripe, Inc., USA)
https://stripe.com/legal/dpa
active
Cloudflare, Inc.
storage and infrastructure
audio files, video files, linked media imports, transcriptions, metadata
processor
USA / EU (Cloudflare R2)
https://www.cloudflare.com/cloudflare-customer-dpa/
active
Google LLC (Gemini) / Amazon Web Services (Bedrock)
audio/video media transcription and AI Notes generation
audio files, video files, linked media imports, transcriptions, AI Notes content, metadata, transcription output
processor / subprocessor
USA (Google) / UE (AWS eu-north-1)
https://cloud.google.com/terms/data-processing-addendum
active
Resend, Inc.
system notifications
email address, system message content
processor
USA
https://resend.com/legal/dpa
active
3. Vendor selection criteria
availability of a Data Processing Agreement (DPA),
whether data is processed within the EU/EEA,
whether encryption is applied,
data retention terms,
whether data is used for model training,
whether model training on client data can be disabled,
how data is deleted after processing,
whether the vendor holds security certifications or documentation.