Legal
Subprocessors
Last updated 13 August 2026
These are the service providers that process personal data on our behalf so the platform can run. This list is referenced by the Privacy Policy and the Data Processing Addendum.
01Current subprocessors
| Provider | What it does | Where |
|---|---|---|
| Supabase | Database, authentication, and file storage for recordings | United States / European Union |
| Vercel | Application hosting, serverless functions, and web analytics | United States, global edge network |
| Stripe | Developer payments and checkout. Card details go to Stripe directly and never reach us | United States, global |
| Resend | Transactional and product email delivery | United States |
| Google (Gemini API) | Automated scoring of sessions, transcription, and translation | United States |
| Cloudflare | DNS, network protection, and bot mitigation | Global edge network |
02Tester payouts
Tester payouts are made in cryptocurrency and are sent manually by an administrator to the wallet address you provide. Your address is stored encrypted and is not shared with any third party other than the public blockchain network required to complete the transfer. A blockchain transaction is public and permanent by design, and we cannot delete it.
03Safeguards
Each subprocessor is bound by a written agreement that requires it to process personal data only on our instructions, keep it confidential, and apply appropriate security. Where a provider processes data outside the European Economic Area or the United Kingdom, transfers rely on the Standard Contractual Clauses and the UK Addendum.
04Changes to this list
We update this page when a provider is added or removed. Developers who have signed the Data Processing Addendum and want advance notice of new subprocessors can request it at privacy@testfi.app.