Current subprocessors
These companies process personal data on our behalf. Each one gets only the data it needs, under a written agreement. AI providers only receive data when someone in your workspace uses an AI feature.
Infrastructure
| Subprocessor | Purpose | Data involved | Location |
|---|---|---|---|
| Application hosting | Runs the ArcDemo app, API and database | All customer data | provider and region |
| Cloudflare, Inc. | Media storage (R2), video delivery (Stream), bot checks (Turnstile) | Captured media, recordings, IP address | Global edge network |
| New Relic, Inc. | Application monitoring and error logs | Technical logs, request metadata | EU data center |
Product and business
| Subprocessor | Purpose | Data involved | Location |
|---|---|---|---|
| Stripe Payments Europe, Ltd. | Subscription billing and payments | Billing contact, payment details | Ireland / United States |
| Resend, Inc. | Transactional email (sign-in, invites, alerts) | Name, email address, email content | United States |
| PostHog, Inc. | Product analytics for signed-in creators | Account identifiers, usage events | EU (Frankfurt) |
AI providers (used only when you use an AI feature)
| Subprocessor | Purpose | Data involved | Location |
|---|---|---|---|
| OpenAI, L.L.C. | Editor agent, copy and translation | Demo text and prompts | United States |
| Anthropic, PBC | Editor agent, copy and translation | Demo text and prompts | United States |
| Google LLC (Gemini API) | Editor agent, image understanding | Demo text, screenshots and prompts | United States |
| ElevenLabs, Inc. | Voiceover generation | Voiceover scripts | United States |
| Cartesia AI, Inc. | Voiceover generation | Voiceover scripts | United States |
| Deepgram, Inc. | Transcribing recorded narration | Audio from recordings | United States |
Updates
We give workspace owners 30 days' notice by email before adding or replacing a subprocessor, as described in our Data Processing Agreement. To ask a question or object, email privacy@arcdemo.io.