Sub-processor List
Every company that processes data for Wavn, what it does, the country it sits in, and what reaches it. Published under Article 28(2) and incorporated into the Data Processing Addendum. A new sub-processor appears here before it begins processing, never after.
- Instrument
- Sub-processor List
- Version
- 2.1
- Effective
- 28 August 2026
- Last updated
- 11 September 2026
- Supersedes
- Version 2.0, updated 28 August 2026
1.What this list is
This is the list of sub-processors engaged by Wavn, Inc., published under Article 28(2) of Regulation (EU) 2016/679 and incorporated by reference into the Data Processing Addendum, including as Annex III to the Standard Contractual Clauses.
It names every company, what it does, the country it operates in, and what reaches it. A list that leaves somebody off is not a shorter list. It is a wrong one.
Each sub-processor operates under a written data processing agreement imposing obligations no less protective than those Wavn owes its customers, restricting it to Wavn’s documented instructions, and prohibiting it from training any model on customer data. Wavn remains fully liable to its customers for their performance.
2.The AI engines
Wavn is not one company’s model in a wrapper. Several engines sit behind it, Wavn’s own code decides which one takes a job, and you never pick one. Every engine Wavn runs on, or intends to run on, is named here.
| Engine | What it does | Where | Status |
|---|---|---|---|
| Wavn AI | Wavn’s own model, trained on Wavn’s own material. Runs the free plan on its own | United States | In use |
| Anthropic | Answers, reasoning and builds | United States | In use |
| Answers and builds, and reading what it is shown | United States | In use | |
| DeepSeek | Building and code work | China | In use |
| Moonshot | Code work on long files | China | In use |
| Zhipu | A second builder behind the first | China | In use |
| Cohere | Turns your text into the numbers the memory searches by | Canada, United States | In use |
| fal | Images and video, when something you asked for needs one | United States | In use |
| Alibaba | Triage and page reading | China | In use |
| MiniMax | A builder alternate | China | In use |
| Mistral | An EU engine, for customers who need the work to stay in the EU | EU | In use |
| BytePlus (ByteDance) | Quick single-file web pages on the everyday plans | Singapore; servers in Malaysia | In use |
In use means the engine is connected in production and work can be sent to it. Every engine above is in use. An engine is listed here before it is switched on, never after, which is the undertaking given in section 6.
OpenAI is not on this list and will not be. It is refused by name in Wavn’s own code, in any form.
3.Training
Only Wavn’s own AI is ever trained on your work. Every other company on this list is barred from training on it. That is a contract term with each of them, not a preference of ours.
And Wavn trains on the free plan only, and only if you switch it on. The switch is in Settings under Privacy and it starts off. Nothing is kept until you turn it on, and turning it off stops it. Chat text only: files and mail are never included. Closing your account erases what was kept.
Paid accounts are never used for training. There is no switch on a paid plan, because there is nothing to decide.
The same rule is written in the Terms of Service and in the Privacy Notice. All three say the same thing; if they ever disagree, that is a defect, and it should be reported to legal@wavn.ai.
4.The platform, always
These run the platform. Using Wavn at all means these three, and the engines in section 2.
| Who | What they do | Where | What reaches them |
|---|---|---|---|
| Vercel | Hosting for the site and the app | United States, EU | Requests, IP addresses, logs |
| Supabase | Database, authentication, file storage | EU | Everything you write and every file you bring |
| Railway | Runs the build engine | United States | The request a build carries and the files it works from |
5.Only when you use the thing they do
None of these is touched unless you do the specific act beside it. Bring no audio and Soniox never hears from you; open no call and the video house never knows you exist.
| Who | What they do | Where | What reaches them |
|---|---|---|---|
| Tavily / Brave | Searches the web when a question needs something Wavn does not hold | United States | The search terms, not your documents |
| Convertio | Turns older document formats into plain text when nothing here can read them | EU | The file itself, sent once, when you attach a format with no reader |
| Soniox | Speech to text, when you talk instead of typing | United States | The audio you record |
| 8x8 / Jitsi | Runs the video room when a call is opened | United States, EU | The call itself. Wavn never carries the video |
| Telegram | Only if you connect it | UAE, Netherlands | The messages and files you send through it |
| Resend | Sends the mail Wavn sends on your behalf | United States | The message and who it goes to |
| Twilio | Sends the one-time code by text when a mobile number is verified | United States | The mobile number and the code. Nothing else |
| Stripe | Payments | United States, EU | Billing details. Card numbers never reach Wavn |
6.Changes to this list, and your right to object
Advance notice. Adding or replacing a sub-processor is a change to where your work goes, so it is published on this page before that sub-processor begins processing, never after.
Notice by email. Customers who prefer notice by email rather than by checking this page may subscribe at privacy@wavn.ai.
Objection. A customer may object to an intended addition or replacement on reasonable grounds relating to data protection, by written notice within thirty (30) days of publication. The parties will discuss the objection in good faith. Where Wavn cannot accommodate it without disproportionate effort, the customer may terminate the affected subscription and receive a pro-rata refund of prepaid unused fees, as set out in the Data Processing Addendum.
7.The paperwork behind it
Each sub-processor operates under a data processing agreement. Transfers out of the EEA, the United Kingdom and Switzerland run on the Standard Contractual Clauses and their UK and Swiss addenda, as set out in the Data Processing Addendum.
Copies of the clauses, and of the current transfer impact assessment, are available on request at privacy@wavn.ai.
Wavn, Inc. Questions about this document go to legal@wavn.ai. The other instruments that bind alongside it are the Terms of Service, Acceptable Use Policy, Privacy Notice, Cookie Notice, Data Processing Addendum, the Sub-processor List and the Refund Policy.