DRAFT — pending legal review. Do not rely on this page as a signed policy.

Subprocessors

Last updated 28 September 2026

Every vendor with access to Content or account data, and why.

Everything is stored and processed in the EU, with two opt-in exceptions: AI assist and Voice & music. Both are off for every workspace until an owner or admin turns them on in Settings, and Studio names the provider and region before they do. With AI assist off, step names come from on-server text recognition and nothing reaches a model provider. With Voice & music off, watch mode plays silent and nothing reaches ElevenLabs.

VendorPurposeLocationHandles Content
Hetzner Online GmbHCompute and database hostingEU (Germany)Yes
Bunny.netCDN and object storage for media assetsEUYes
Stripe Payments Europe, Ltd.Subscriptions and payment processing for paid plansEU (Ireland)/USNo
Sold through Link, LLC (Stripe)Merchant of record and reseller for paid plans: checkout, sales tax and VAT, receipts, invoices, refunds and payment supportUSNo
ResendTransactional email (magic-link sign-in)EU/USNo
Anthropic, PBCOptional AI assist: step names, tooltips, titles, translation. Only for workspaces that turn it on.USYes
ElevenLabs Inc.Optional Voice & music: generated narration, background music and sound effects for watch mode. Only for workspaces that turn it on; text only, never a screenshot.USYes

What AI assist sends. For a workspace that turned it on, each new recording sends its step screenshots and the text recognised on them to Anthropic in the United States, once. Emails, phone numbers, card numbers, IBANs and labelled names are removed from that text first; the screenshots themselves are not altered, so use redaction or test data for anything sensitive. Translation sends the demo's text only. Anthropic processes it under its commercial terms and data processing addendum, which do not allow training on it, and transfers are covered by the Standard Contractual Clauses in that addendum.

What Voice & music sends. For a workspace that turned it on, generating a step's voiceover sends that step's narration text to ElevenLabs in the United States; generating a demo's music sends the short style prompt behind it (e.g. "calm", "upbeat"). Neither ever sends a screenshot, and a personalisation placeholder's raw `{key}` is never sent — only its fallback text is, the same text a viewer without that variable would see. ElevenLabs processes it under its commercial terms and data processing addendum, which do not allow training on it, and transfers are covered by the Standard Contractual Clauses in that addendum.

What billing shares. Paid plans are sold through Link, Stripe's reseller, which acts as merchant of record: the buyer's name, email, billing address and payment details go to Stripe and Link, which process them as the seller under their own terms and privacy policy. They receive no Content and nothing about demo viewers.

We'll update this page before adding or changing any subprocessor with access to Content.