Sub-processors

This list is part of our Data Processing Agreement (Annex 3). We tell customers by email before we add or replace a sub-processor, and you can object, as section 7 of the Data Processing Agreement explains.

Companies that may handle your clients' information #

Scaleway SAS: What it does for TranqBayHosting: the servers and databases TranqBay runs on, and some backups; LocationFrance (Paris); AgreementData processing agreement
Amazon Web Services: What it does for TranqBayStorage of files and session transcripts, backups, and sending email; LocationGermany (Frankfurt), with backup copies in Ireland; AgreementData processing agreement
Cloudflare, Inc.: What it does for TranqBayDelivering and protecting our websites, relaying video sessions (which are end-to-end encrypted, so Cloudflare cannot see or hear them), and connecting therapists' own domains; LocationUnited States company, global network; AgreementData processing agreement
Anthropic, PBC: What it does for TranqBayAI model that drafts AI session notes (only when a therapist turns them on), checks call transcripts in the automated contact check, and powers the website AI editor; LocationUnited States; AgreementBusiness associate agreement and data processing terms
A speech-to-text processor: What it does for TranqBayTurns session speech into text for AI session notes and live captions (only when a therapist turns AI session notes on), and for the automated contact check on calls; LocationUnited States; AgreementBusiness associate agreement
Stripe (the Stripe company for your region): What it does for TranqBayCard payments for subscriptions and from clients, and payouts to therapists; LocationUnited States, United Kingdom or Ireland, depending on your region; AgreementData processing agreement
Paystack Payments Limited, a Stripe company: What it does for TranqBayCard payments for subscriptions and from clients, and payouts to therapists, in local currency, where available in your country; LocationAfrica, in the countries where Paystack operates; AgreementPaystack's terms of service, including their data protection terms
Google LLC: What it does for TranqBayGoogle Calendar connection, only if a therapist connects it (read-only, to block busy times); notifications to our mobile apps; Google Analytics on practice websites, to count visits; LocationUnited States; AgreementGoogle's API terms and data processing terms

Sub-processor	What it does for TranqBay	Location	Agreement
Scaleway SAS	Hosting: the servers and databases TranqBay runs on, and some backups	France (Paris)	Data processing agreement
Amazon Web Services	Storage of files and session transcripts, backups, and sending email	Germany (Frankfurt), with backup copies in Ireland	Data processing agreement
Cloudflare, Inc.	Delivering and protecting our websites, relaying video sessions (which are end-to-end encrypted, so Cloudflare cannot see or hear them), and connecting therapists' own domains	United States company, global network	Data processing agreement
Anthropic, PBC	AI model that drafts AI session notes (only when a therapist turns them on), checks call transcripts in the automated contact check, and powers the website AI editor	United States	Business associate agreement and data processing terms
A speech-to-text processor	Turns session speech into text for AI session notes and live captions (only when a therapist turns AI session notes on), and for the automated contact check on calls	United States	Business associate agreement
Stripe (the Stripe company for your region)	Card payments for subscriptions and from clients, and payouts to therapists	United States, United Kingdom or Ireland, depending on your region	Data processing agreement
Paystack Payments Limited, a Stripe company	Card payments for subscriptions and from clients, and payouts to therapists, in local currency, where available in your country	Africa, in the countries where Paystack operates	Paystack's terms of service, including their data protection terms
Google LLC	Google Calendar connection, only if a therapist connects it (read-only, to block busy times); notifications to our mobile apps; Google Analytics on practice websites, to count visits	United States	Google's API terms and data processing terms

Tools we run ourselves #

These tools run on our own servers with Scaleway in Paris, France. No other company has access to the information in them.

Chatwoot: What it doesLive chat support
Listmonk: What it doesSending emails (delivered through Amazon Web Services, above)
GlitchTip: What it doesError reports, with personal details filtered out
Flagsmith: What it doesTurning features on and off
Grafana, Loki and Tempo: What it doesMonitoring, logs and traces
Infisical: What it doesKeeping passwords and keys safe

Tool	What it does
Chatwoot	Live chat support
Listmonk	Sending emails (delivered through Amazon Web Services, above)
GlitchTip	Error reports, with personal details filtered out
Flagsmith	Turning features on and off
Grafana, Loki and Tempo	Monitoring, logs and traces
Infisical	Keeping passwords and keys safe

Companies that handle only your information as our customer #

Dynadot: What it doesRegisters domains you buy through TranqBay, in your name; LocationUnited States

Company	What it does	Location
Dynadot	Registers domains you buy through TranqBay, in your name	United States

Changes to this list #

When we plan to add or replace a sub-processor, we update this page and email our customers at least 30 days before the change, and you can object, as section 7 of the Data Processing Agreement sets out. Questions about this list go to [email protected].