Legal
Last updated: October 12, 2026
The companies Aftertalk engages to process personal data in Customer Content (recordings, transcripts and analysis results), under section 7 of our Data Processing Agreement. We give at least 30 days' notice before adding or replacing a sub-processor, by updating this page and emailing every organization owner.
| Company | Purpose | Data location | Transfer outside the EEA |
|---|---|---|---|
| Amazon Web Services EMEA SARL | App and database hosting, recording storage, audio processing, email delivery | Frankfurt (EU) | Not applicable (EEA) |
| Vercel Inc. | Web app hosting | Frankfurt (EU); US company | Standard contractual clauses |
| Groq, Inc. | Speech transcription | USA | Standard contractual clauses |
| OpenAI | Transcript analysis (summaries, scores, tasks) | USA | Standard contractual clauses |
| pyannoteAI | Recognizing who is speaking in each part of a recording | France (EU) | Not applicable (EEA) |
| Functional Software, Inc. (Sentry) | Error diagnostics; call content and tokens are removed before sending | Germany (EU); US company | Standard contractual clauses |
The transcription and AI analysis providers process data through their APIs on terms that exclude using the submitted data to train their models. AI analysis always receives the transcript with personal data masked; the recording goes to the transcription provider unmasked.
These providers don't process Customer Content. They handle account, payment and usage data, for which Aftertalk is the controller (see the Privacy Policy).
| Company | Purpose | Data location | Transfer outside the EEA |
|---|---|---|---|
| Stripe Payments Europe, Limited | Payments and invoices. Stripe acts as merchant of record and as an independent controller | Ireland (EU) | Not applicable (EEA) |
| PostHog Inc. | Cookieless product analytics with content masking | EU cloud (Frankfurt) | Data in the EU; US company: Standard Contractual Clauses |
| Google, Microsoft | Sign-in with a Google or Microsoft account, if you choose it | Per the provider's terms | EU–US Data Privacy Framework |
Questions about sub-processors or transfer mechanisms: privacy@aftertalk.co.