Subprocessors
Last updated 28 September 2026
Every vendor with access to Content or account data, and why.
Everything is stored and processed in the EU, with two opt-in exceptions: AI assist and Voice & music. Both are off for every workspace until an owner or admin turns them on in Settings, and Studio names the provider and region before they do. With AI assist off, step names come from on-server text recognition and nothing reaches a model provider. With Voice & music off, watch mode plays silent and nothing reaches ElevenLabs.
| Vendor | Purpose | Location | Handles Content |
|---|---|---|---|
| Hetzner Online GmbH | Compute and database hosting | EU (Germany) | Yes |
| Bunny.net | CDN and object storage for media assets | EU | Yes |
| Stripe Payments Europe, Ltd. | Subscriptions and payment processing for paid plans | EU (Ireland)/US | No |
| Sold through Link, LLC (Stripe) | Merchant of record and reseller for paid plans: checkout, sales tax and VAT, receipts, invoices, refunds and payment support | US | No |
| Resend | Transactional email (magic-link sign-in) | EU/US | No |
| Anthropic, PBC | Optional AI assist: step names, tooltips, titles, translation. Only for workspaces that turn it on. | US | Yes |
| ElevenLabs Inc. | Optional Voice & music: generated narration, background music and sound effects for watch mode. Only for workspaces that turn it on; text only, never a screenshot. | US | Yes |
What AI assist sends. For a workspace that turned it on, each new recording sends its step screenshots and the text recognised on them to Anthropic in the United States, once. Emails, phone numbers, card numbers, IBANs and labelled names are removed from that text first; the screenshots themselves are not altered, so use redaction or test data for anything sensitive. Translation sends the demo's text only. Anthropic processes it under its commercial terms and data processing addendum, which do not allow training on it, and transfers are covered by the Standard Contractual Clauses in that addendum.
What Voice & music sends. For a workspace that turned it on, generating a step's voiceover sends that step's narration text to ElevenLabs in the United States; generating a demo's music sends the short style prompt behind it (e.g. "calm", "upbeat"). Neither ever sends a screenshot, and a personalisation placeholder's raw `{key}` is never sent — only its fallback text is, the same text a viewer without that variable would see. ElevenLabs processes it under its commercial terms and data processing addendum, which do not allow training on it, and transfers are covered by the Standard Contractual Clauses in that addendum.
What billing shares. Paid plans are sold through Link, Stripe's reseller, which acts as merchant of record: the buyer's name, email, billing address and payment details go to Stripe and Link, which process them as the seller under their own terms and privacy policy. They receive no Content and nothing about demo viewers.
We'll update this page before adding or changing any subprocessor with access to Content.