Subprocessors
Every company that touches your data because we handed it to them.
Subprocessors
Last updated 4 October 2026. Reviewed by Cole Maffeo, owner of Genesis Web Digital LLC.
On a managed plan, including the 7-day trial, Genesis Web Digital LLC is a processor of the call data you send us, and you are the controller. A subprocessor is a company that handles that data because we handed it to them. We list ours here so you can authorise them, and we tell you before the list changes. On a bring-your-own-keys plan no server of ours receives call data: your audio goes to Deepgram and your transcripts and knowledge go to Anthropic under your own accounts with them, they are not our subprocessors there, and this list does not apply. See the Data Processing Agreement and the privacy policy.
Who touches buyer data under managed AI
| Company | What they receive | Where | Why |
|---|---|---|---|
| Anthropic | Call transcript text. For a long call, the opening of the transcript is sent in full to be paraphrased, and the paraphrase is then used when the notes are written. Also the client name and company on the call; call notes; the record you hold for the client on the call and for any other client named during it (contacts, history, notes), including, for the client on the call, any open invoice numbers, amounts, due dates and status you have recorded; your knowledge (pricing, objection answers, product list); and live web-lookup queries. In the Chrome extension, which is not yet released, also up to ten past calls' notes and transcripts when you use Search past calls | A US company. We do not pin where it runs a request, and it may process requests outside the United States | Generates the cards and the post-call notes. Their commercial terms bar training on customer content by default |
| Deepgram | Call audio. The Mac app also sends up to 50 spoken-name hints so names are transcribed correctly: the client name and company typed in before the call; client names, contact names and aliases from your own records; and a short fixed list of tool names built into the app. The Chrome extension sends none | A US company. Our server uses its standard API endpoint, and we do not choose where it processes audio | Speech to text. On a managed call the audio is relayed through our own server rather than sent straight from your device. We do not store it, and mip_opt_out is sent on every request to keep it out of Deepgram's model improvement |
| Neon | Licence record (including the buyer's email address), device and subscription records (including Stripe customer and subscription identifiers), call records, usage records (operation, token counts, minutes, cost, time), and the operator's knowledge, which we encrypt before storing | United States | The database |
| DigitalOcean | Call audio and request data in transit, and server logs: your IP address, request paths, timestamps, and licence and call identifiers | United States | Hosts our server. Call audio is streamed through its memory while a call runs and is not written to disk. A larger request or response, which can include transcript text or your knowledge in unencrypted form, may be held in a temporary file by our web server until the request ends. Its disk also holds server logs (our application's log lines and a standard web-server access log), which are not designed to hold call content. If our server crashes, error output can be printed to the system log, and we do not claim that is free of content |
A call that falls back to your own keys is not a managed call. If the managed service is unavailable when you start a call, or your allowance is used up (including the trial call, or any overage limit we have agreed with you in writing), and you have saved your own Anthropic and Deepgram keys, the app runs that call on them. It tells you the first time this happens after you open the app, not on every call, so a later call in the same session can run on your own keys without a new notice. The audio then goes from your device to your own Deepgram account, and the transcript text to your own Anthropic account, on your terms with them. We do not receive the audio or the transcript, and neither company is our subprocessor for that call. Your device will usually have contacted us before then, to check the service and, if the service answered, to sync your knowledge and ask to start the call, so those records are handled as described above. A call that is already running when your allowance runs out stays on our service: transcription continues and suggestions pause.
Work outside a call is not part of the managed service. On the Mac, the setup wizard's draft and importing a document into setup use your own Anthropic key if you have saved one. That text goes from your device to your own Anthropic account, on your terms with them, and we do not receive it. Managed AI covers the live call and the notes written after it.
Not subprocessors, and worth stating because buyers ask: the plans sold today (the trial and Solo) do not connect to a CRM or a calendar, and no request to one goes through our servers. Stripe takes your payment and issues your invoices under its own terms with you and with us. You give it your name, email and card details at checkout; if we have agreed overage with you in writing, our server also sends it the minutes past your allowance and the amount, to add to your invoice. It never receives call audio, transcripts or your knowledge, and it is not part of the processing this page and the DPA describe.
What we keep out of each one
- Deepgram gets the audio and, from the Mac app only, the name hints described above. It does not get your knowledge files themselves, your licence key, device tokens or billing data. We instruct Deepgram, on every request, to exclude the audio from its Model Improvement Partnership Program; Deepgram's documentation says requests join that program by default, so this is an opt-out we send, not a setting it inherits. That setting is fixed in our server and cannot be changed by a client. We have not entered into a separate data processing agreement or Standard Contractual Clauses with Deepgram, so for Deepgram that configuration, and not a contract, is what we rely on.
- Anthropic receives text only, and only to answer the request at hand. It does not receive your API keys, your licence key, your device token, or the details of your own Pace Notes subscription billing. The client records it does receive are listed in the table above.
- Neon never receives transcript or card content. Usage records hold the operation, token counts, minutes, cost and time, never what was said.
Where it is held
Our own records are held in the United States: our database is hosted by Neon in its us-east-1 region, and our server runs on DigitalOcean in its nyc3 data centre. Pace Notes is sold to buyers in the United States only at launch, and we do not offer an EU or UK deployment.
That is a statement about where we keep records, not about where our two AI subprocessors process a request. Anthropic is a US company, but we do not pin where it runs a request, and it may process requests outside the United States. Deepgram is a US company; our server uses its standard API endpoint, and we do not choose, or claim to know, where it processes audio. We therefore do not claim that call audio or transcript text stays in the United States.
Changing this list
We give you 30 days' written notice before a new subprocessor starts processing your data. You may object on reasonable data-protection grounds by writing to cole@genesisweb.org. If the objection cannot be resolved, either party may end the subscription without penalty. The subscription is monthly, so it ends at the end of the period already paid for and no further fee is charged. You cancel in Stripe's customer portal as the Terms describe, and the Terms' refund rules apply as they do to any cancellation (Data Processing Agreement, section 5).