Subprocessors

Last Updated: October 15, 2026

These companies process personal data for UpSpeech, on our instructions and under a contract with us. Under the GDPR they are our sub-processors. Our Privacy Policy explains what we collect and why.

We update this page before we add or replace a provider.

Where a provider processes data outside the European Economic Area, the transfer relies on the European Commission's Standard Contractual Clauses.

Hosting and storage

Railway

What it does: Hosts our servers and database
Data: All platform data
Where: European Union (Netherlands)

Google Cloud Storage

What it does: Stores audio and video recordings, and organisation logos
Data: Recordings, which can contain health information
Where: European Union

AI

ElevenLabs

What it does: Turns uploaded recordings into text, and turns speech into text and text into speech in live practice conversations
Data: Recordings, live audio, transcripts and report text
Where: United States

Groq

What it does: Turns the audio from practice scenarios into text
Data: Audio from practice scenarios
Where: United States

Google Gemini

What it does: Language models that write report drafts, answer in the in-app chats, run practice conversations and the intake interview
Data: Transcripts, the context a therapist writes for a report, chat messages, and the patient's name in practice conversations and the intake interview
Where: United States and other countries where Google operates

Langfuse

What it does: Keeps a record of each AI request and response, to check quality and fix errors
Data: AI requests and responses, including transcripts and chat messages
Where: European Union (Ireland)

Real-time media

Cloudflare

What it does: Relays the live audio and video of practice conversations when a direct connection is not possible
Data: Live audio and video, passed through and not stored
Where: The Cloudflare location nearest to you

Email and notifications

Resend

What it does: Sends transactional email, such as invitations and password resets
Data: Names, email addresses and email content
Where: United States

Expo, with Apple and Google

What it does: Delivers push notifications to the mobile apps, through Apple Push Notification service and Firebase Cloud Messaging
Data: Device push tokens, and the title and text of each notification
Where: United States

Analytics and error tracking

PostHog

What it does: Product analytics
Data: Usage events and user identifiers
Where: European Union

Sentry

What it does: Error tracking
Data: Error reports, which can include an IP address
Where: European Union (Germany)

Website

Netlify

What it does: Hosts this website and receives the early-access form
Data: Form submissions (name, email and role), and visitor logs
Where: United States

Questions

Email [email protected].