To deliver the Konversation.io platform, we engage trusted third-party providers (subprocessors) to process certain personal data on our behalf. Each subprocessor is bound by contractual data-protection obligations and may only process data for the purposes we specify.
1.Overview
The table below lists the subprocessors that may process personal data in connection with the Services, along with the purpose of processing, the primary processing locations, and the categories of data involved. This page supplements our Privacy Policy and Data Processing Agreement.
2.Current Subprocessors
| Provider | Purpose | Location | Data Categories |
|---|---|---|---|
| OpenAI | Large language model and AI inference for chatbot responses, classification, and summarisation | United States | Prompts, conversation content, AI inputs and outputs |
| Anthropic | Large language model and AI inference for conversational AI features | United States | Prompts, conversation content, AI inputs and outputs |
| Stripe | Payment processing, subscription billing, and fraud prevention | United States / EU / UK | Billing details, payment tokens, transaction data |
| Cloudflare | Content delivery, DNS, DDoS protection, and edge security | Global (United States HQ) | IP addresses, request metadata, security logs |
| Vercel | Application hosting, serverless compute, and deployment infrastructure | United States / Global edge | Application data, logs, request metadata |
| Google Analytics | Website and product usage analytics and reporting | United States | Usage data, device data, cookie identifiers |
3.International Transfers
Some subprocessors are located outside the United Kingdom and the European Economic Area. Where personal data is transferred internationally, we rely on appropriate safeguards, such as the UK International Data Transfer Agreement, the UK Addendum, or the EU Standard Contractual Clauses, together with supplementary measures where necessary, to ensure an adequate level of protection.
4.Changes to Subprocessors
We may add, remove, or replace subprocessors over time as our Services evolve, as we adopt new technologies, or as business needs change. When we intend to engage a new subprocessor to process customer personal data, we will update this page and provide at least 30 days' notice before that subprocessor begins processing. If you have a legitimate, data-protection-based objection, contact us within 14 days of the notice at team@konversation.io and we will work with you in good faith to resolve it. We encourage customers to review this page periodically for the most current information.
This list was last updated on June 15, 2026.
5.Contact Information
To request notifications of subprocessor changes or to raise an objection, contact us at team@konversation.io.
Questions about this document?
If you have questions about this document, or wish to exercise any rights described above, contact us at team@konversation.io or by post at Unit A10 509 Bizspace Business Park Kings Road, Birmingham, Tyseley, England, B11 2AL, United Kingdom.