Subprocessors and infrastructure
Last updated: August 20, 2026
This list describes the material service providers used for the production Silestis service. Not every feature uses every provider. The model and product feature selected for a job determine the actual data flow.
| Provider | Purpose and data | Primary configuration | Transfer mechanism |
|---|---|---|---|
| Cloudflare, Inc. | Web app, API, security, Workers, Workers AI, R2 media storage, and containers. Processes account and technical metadata and, for transcription jobs, audio or video. | R2 and production containers in EU configurations; global network and support components may apply. | Data Processing Addendum; EU-US Data Privacy Framework where applicable, otherwise Standard Contractual Clauses. |
| Supabase, Inc. | Authentication, Postgres database, and server-side platform services. Processes account, contract, transcript, sharing, and usage data. | Production project in the EU region Dublin. | Data Processing Addendum; EU-US Data Privacy Framework or Standard Contractual Clauses. |
| Google LLC / Google Cloud | Gemini transcription, selected generative features, and text embeddings. Processes audio or text needed for the selected job and technical metadata. | Google Cloud enterprise path with an EU endpoint and short-lived Workload Identity authentication. | Google Cloud Data Processing Addendum; EU-US Data Privacy Framework or Standard Contractual Clauses. |
| Mistral AI SAS | Voxtral transcription and selected summarisation, chat, and text functions. Processes audio or text required for the job. | France/EU; Zero Data Retention enabled for the stateless APIs used. | Data Processing Addendum; EU processing and Standard Contractual Clauses for any subprocessors outside the EEA. |
| Stripe Payments Europe, Ltd. / Stripe, Inc. | Checkout, payments, invoices, subscriptions, tax calculation, and fraud prevention. Processes contract, billing, and payment data. Stripe acts as an independent controller for parts of payment processing. | European Stripe contracting structure with global payments infrastructure. | Stripe Data Processing Agreement; EU-US Data Privacy Framework or Standard Contractual Clauses. |
| Functional Software, Inc. (Sentry) | Minimised error and security diagnostics. Processes pseudonymous technical error data, not cookies or transcript content. | EU region Frankfurt. | Data Processing Addendum; EU-US Data Privacy Framework or Standard Contractual Clauses. |
| Brevo / Sendinblue SAS | Transactional, login, contract, billing, and service email. Processes recipient address, delivery status, and the relevant message content. | France/EU. | Data Processing Agreement and Standard Contractual Clauses for any subprocessors outside the EEA. |
| Better Stack, Inc. | Availability monitoring of public health endpoints and alerting. No audio, video, or transcript content. | Global monitoring infrastructure. | Data processing terms and, where required, Standard Contractual Clauses. |
Apple Speech processes audio locally on the Apple device when the feature is labelled “On-device”. For this feature, the audio is not sent to a Silestis cloud model provider. Operating-system services and speech-model downloads remain independently subject to the user’s Apple settings and Apple’s terms.
The previously used Modal and Groq providers are not part of the active production path. Re-enabling either provider requires an updated list, a privacy review, and documented approval before production use.
Subprocessor changes are reviewed before production use and published in this list. Business customers with an individual Data Processing Addendum receive the change notice agreed there. Questions or reasoned objections may be sent to hello@silestis.com.