Last updated June 2026
Sub-processors
These are the third-party services Razen uses to operate the Service. Each is bound by a written agreement requiring confidentiality and security commitments at least as strict as our own. We notify business customers of changes at least 30 days in advance.
| Sub-processor | Purpose | Data | Region |
|---|---|---|---|
| Supabase | Hosting, database, authentication, file storage | All user data, including session transcripts (text only — session audio is never stored) | EU + US |
| Cloudflare | Edge delivery, DDoS protection, Workers runtime | All HTTP traffic | Global edge |
| Stripe | Subscription billing, payments, fraud prevention | Email, payment-method token (held by Stripe), billing history | EU + US |
| ElevenLabs | Text-to-speech (optional premium voices; the default voices run on your device) | Text to be spoken; generated audio | EU residency available; US for general traffic |
| Deepgram | Speech-to-text (live) | User voice audio streamed during sessions | US (SCCs + UK addendum in place for EU / UK users) |
| Google (Gemini) & Anthropic (Claude) | Large language model inference (scene generation, debrief, in-session character) | Transcript text, character metadata, scenario prompts | US / EU (SCCs + UK addendum in place for EU / UK users; no training on inputs) |
| Cartesia | Text-to-speech failover | Generated audio | US (SCCs + UK addendum in place for EU / UK users) |
| Resend | Transactional email | Email address, display name, message content | EU + US |
| PostHog EU | Anonymised product analytics (consent-gated) | Anonymous distinct ID, page views, event metadata (no transcripts) | EU |
| Sentry | Error monitoring | Stack traces, error context (no PII) | US |
International transfers
Where personal data is transferred to a sub-processor outside the UK or EEA, we rely on the EU Standard Contractual Clauses (2021/914) and the UK addendum, with appropriate technical and organisational supplementary measures.
Updates to this list
This page is generated from a version-controlled file in our repository. It is updated whenever the list changes; business customers receive 30 days' notice of additions or substitutions before they take effect. Sign up for change notifications by emailing razenai@outlook.com.