Sub-processors
Last updated July 11, 2026. Slide Practice uses a small number of vetted sub-processors, each responsible for a specific function and bound by a data processing agreement. Every one of them is named below, along with what it does, what data it sees, and where it runs. Nothing on this list is withheld. This page is provided for transparency and is not personalized legal advice.
We do not sell or rent personal data, and we do not share personal data for cross context behavioural advertising. We share personal data only with the service providers (sub-processors) that help us operate Slide Practice. Each acts under a written contract, on our instructions, processes data only for the function shown, and is required to protect it.
The providers you most need to know about are the ones that touch your clients' session content: Recall.ai captures the meeting audio when you turn on Auto Join, OpenAI transcribes that audio into text, and Anthropic drafts the recap from the transcript. We instruct our AI providers not to use the content of your sessions to train their models. If you would like a signed PDF of this list, including each provider's own DPA link, email support@slidepractice.com and we will send one.
Our sub-processors
| Sub-processor | What it does | Data processed | Location |
|---|---|---|---|
| Recall.ai Meeting capture | Joins a Zoom, Google Meet, or Microsoft Teams call and records it, but only when you turn on Auto Join for a session. Nothing is captured until your client agrees on screen. | Meeting audio | Recording region Asia Pacific (Tokyo); vendor in the United States |
| OpenAI Speech to text | Transcribes session audio into text so a recap can be drafted from it. Instructed not to train on your content. | Session audio | United States |
| Anthropic Recap generation | Drafts the session recap and action items from the session transcript. Instructed not to train on your content. | Session transcripts | United States |
| Supabase Database and file storage | Holds your account, client, and booking records in an encrypted PostgreSQL database, and your session audio and transcripts in encrypted object storage. | All customer data, including session audio and transcripts | Asia Pacific (Tokyo); vendor in the United States |
| Clerk Authentication and identity | Sign in, session management, and account recovery, including bot protection on the sign-in form. Clerk sees your account identity, never your session content. | Email, name, IP address | United States |
| Paddle (Paddle.com Market Ltd) Merchant of record | Processes practitioner subscription payments as merchant of record, including sales tax and VAT. Paddle is the seller of record and appears on your statement. Slide Practice is never in the payment path between practitioners and their clients. | Subscription billing details | United Kingdom / United States |
| Resend Transactional email | Delivers booking confirmations, recap emails, and account and security notifications. | Email addresses, message content | United States |
| Fly.io Application hosting | Runs the Slide Practice application. | Application metadata, request logs | Asia Pacific (Singapore) |
| Vercel Marketing site hosting | Hosts slidepractice.com and the serverless functions behind public profiles, the practitioner directory, and site forms. | Request logs, form submissions | Global edge network; vendor in the United States |
| Plausible Website analytics | Counts page visits without cookies. No cross-site tracking and no advertising profiles. | Aggregate page view data | European Union |
| Sentry Error monitoring | Receives error diagnostics from the application when enabled, so we can find and fix faults. Never receives session recordings, transcripts, or recaps. | Error messages, stack traces, request metadata | United States |
| Upstash Rate limiting | Holds the rate limit counters that block abuse and brute force attempts, when enabled. | Rate limit keys derived from IP address | United States |
| Meta Advertising measurement | Measures signups from our own ads, and only after you give marketing consent. If you do not consent, nothing is sent. Never receives session content. | Page and conversion events | United States |
The locations above describe where data is stored and processed and, where a provider is incorporated in the United States, its domicile. Customer data and uploaded files are hosted in Asia Pacific (Tokyo), application runtime and edge caching run in Asia Pacific (Singapore), and Auto Join meeting recordings are captured in the Asia Pacific (Tokyo) region. As noted in our Privacy Policy, we instruct our AI providers not to use the content of your sessions to train their models. Session recordings, transcripts, and recaps are never sent to Paddle, Plausible, Sentry, or Meta.
Changes to this list
This list is current as of July 11, 2026, and may change from time to time, with notice, as our providers change. Before we add or replace a sub-processor, we will announce the change by email to all paid customers at least 30 days in advance, so that you have the opportunity to review it. When the list changes, this page changes with it.
You can also review our Privacy Policy, our Data Processing Addendum, our Terms of Service, and our Cookies Policy. For any question about a provider, or to request a signed copy of this list or of the Data Processing Addendum, contact support@slidepractice.com.