Subprocessors
Last updated: April 24, 2026
This page lists every third-party service that processes Tedigo Agency customer data, along with their role, region, and data-transfer mechanism for international transfers. Tedigo gives customers 30 days' notice (via email and a posted update here) before adding any new subprocessor.
For a signed Data Processing Addendum (DPA) covering this list, see our DPA. For privacy practices in plain language, see our Privacy Policy.
Infrastructure
Hetzner Online GmbH
- Role
- Primary cloud infrastructure (compute and private network).
- Region
- Ashburn, Virginia, USA. EU residency (Falkenstein, DE / Helsinki, FI) available on request.
- Data categories
- Account data, conversation logs, uploaded documents, embeddings, payment metadata, audit logs.
- Transfer mechanism
- EU-US Data Privacy Framework (Hetzner Cloud Inc., DPF-certified) + Standard Contractual Clauses in signed DPA.
AI Inference
OpenAI, L.L.C.
- Role
- Embeddings (semantic search across your knowledge base) and chat completions.
- Region
- United States.
- Data categories
- User prompts, conversation history, document content for embedding. API customer data is not used for training (default for paid API).
- Transfer mechanism
- Data Privacy Framework certified + SCCs in OpenAI Business DPA.
Anthropic PBC
- Role
- Claude API for advanced reasoning tasks and complex troubleshooting.
- Region
- United States.
- Data categories
- User prompts, conversation context. API customer data is not used for training (default).
- Transfer mechanism
- DPF-certified + SCCs in Anthropic DPA.
Groq, Inc.
- Role
- Low-latency inference for chat, speech-to-text (Whisper), and text-to-speech (Orpheus).
- Region
- United States (datacenters in TX, VA).
- Data categories
- User prompts, conversation context, voice audio, generated voice audio, transcripts. Groq does not train on customer data per ToS.
- Transfer mechanism
- SCCs (DPF certification status verified per request).
Google LLC (Gemini)
- Role
- Real-time voice with per-turn function calling.
- Region
- United States and global Google datacenters.
- Data categories
- Voice audio, transcripts, function-call results. Customer data is not used for training (paid API).
- Transfer mechanism
- DPF-certified + SCCs in Google Cloud DPA.
Fixie.ai, Inc. (Ultravox)
- Role
- Real-time voice agent infrastructure with server-tool retrieval.
- Region
- United States. Subprocessor chain: Ultravox → LiveKit (real-time transport).
- Data categories
- Voice audio, transcripts, server-tool payloads.
- Transfer mechanism
- SCCs.
Payment Processing
Stripe, Inc.
- Role
- Payment processing, subscription billing, customer portal.
- Region
- United States and Stripe global infrastructure.
- Data categories
- Email, name, billing address, payment method (held by Stripe — Tedigo never sees card data). PCI-DSS Level 1.
- Transfer mechanism
- DPF-certified + SCCs in Stripe DPA.
DNS and Operational
Cloudflare, Inc.
- Role
- DNS for tedigo.com zone.
- Region
- United States + global anycast.
- Data categories
- DNS query logs (IP addresses, query patterns).
- Transfer mechanism
- DPF-certified + SCCs in Cloudflare DPA.
DigitalOcean, LLC
- Role
- DNS hosting for tedigo.com zone.
- Region
- United States + global.
- Data categories
- DNS query logs.
- Transfer mechanism
- DPF-certified + SCCs in DigitalOcean DPA.
Notification of changes
We update this page whenever we add, remove, or change a subprocessor. Existing customers receive an email notice at least 30 days before the change takes effect, in accordance with our DPA. If you object to a new subprocessor, you may terminate your subscription before the change takes effect with a prorated refund of any prepaid amount.
Questions
Email agency@tedigo.net for questions about subprocessors, data residency, or to request EU-region hosting.
