Subprocessors
The third parties that process data on Adjuro's behalf, what each one handles, and where it runs.
This page is the current subprocessor list referenced by Section 4.1 of our Privacy Policy. Each provider below is bound by a data processing agreement requiring it to process data only on Adjuro's instructions. We will notify customers of material changes to this list.
Infrastructure
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Fly.io | Application server hosting | API request data in transit and in memory | London, UK |
| Supabase | Managed Postgres database | Tenant accounts, agents, attestations, signing key metadata | London, UK |
| Amazon Web Services | AWS KMS — cryptographic signing | Attestation payloads submitted for signature and the returned signatures. Private keys are generated inside KMS hardware security modules and cannot be exported | United States |
| Upstash | Redis-backed API rate limiting | IP addresses and tenant identifiers only | Global edge |
| Vercel | Website and documentation hosting | Website request logs | Global edge |
| Cloudflare | DNS, content delivery, DDoS protection | Network-level request metadata | Global edge |
Business operations
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Resend | Transactional email | Account email addresses, sign-in links, service notifications | United States |
| Stripe | Payment processing | Billing contact and payment details. Adjuro does not store card numbers | United States |
| Loom and similar tools | Customer support and demos | Content you choose to share in a support interaction | United States |
Not subprocessors
Voice-agent platforms — Vapi, Retell, Bland and similar — are not Adjuro subprocessors.
They are your vendors. At your direction they send Adjuro call-event metadata: a call identifier, a status, an ended-reason code, and the fields you injected at call creation. Data flows one way. Adjuro does not send them your data, does not retrieve call recordings or transcripts from them, and holds no contractual relationship with them on your behalf.
What no subprocessor receives
None of the providers above receives call audio, call transcripts, or recipient phone numbers — because Adjuro does not collect them. Recipient numbers reach us only as HMAC-SHA256 hashes, salted per tenant. Where a customer binds a call recording to an attestation, the customer computes the SHA-256 digest themselves and sends only that digest; the recording never leaves their control.
Changes to this list
We update this page whenever a subprocessor is added or removed, and notify customers of material changes as described in Section 10 of the Privacy Policy.