Sub-processors
Every company that touches your data, and what reaches them. A list that leaves somebody off is not a shorter list. It is a wrong one.
Always
These run the platform. Using Wavn at all means these four.
| Who | What they do | Where | What reaches them |
|---|---|---|---|
| Vercel | Hosting for the site and the app | United States, EU | Requests, IP addresses, logs |
| Supabase | Database, authentication, file storage | EU | Everything you write and every file you bring |
| Railway | Runs the build engine | United States | The request a build carries and the files it works from |
| Anthropic | The models that answer and build | United States | Your prompts, and the files sent with them |
Only when you use the thing they do
None of these are touched unless you do the specific act beside them. Bring no audio and Soniox never hears from you; open no call and the video house never knows you exist.
| Who | What they do | Where | What reaches them |
|---|---|---|---|
| Convertio | Turns older document formats into plain text when nothing here can read them | EU | The file itself, sent once, when you attach a format with no reader |
| Soniox | Speech to text, when you talk instead of typing | United States | The audio you record |
| 8x8 / Jitsi | Runs the video room when a call is opened | United States, EU | The call itself. Wavn never carries the video |
| Telegram | Only if you connect it | International | The messages and files you send through it |
| Stripe | Payments | United States, EU | Billing details. Card numbers never reach Wavn |
Training
None of these are permitted to train models on your work. That is a contract term with each of them, not a preference of ours.
When this list changes
Adding a sub-processor is a change to where your work goes, so it is dated here before it happens, not after. Enterprise customers who want the notice by email rather than by checking a page can ask at privacy@wavn.ai.
The paperwork behind it
Each of these operates under a data processing agreement. Transfers out of the EEA and UK run on Standard Contractual Clauses. Copies on request at privacy@wavn.ai.