Sub-processors
The services that process customer data for Utalis.
Last updated: November 5, 2026
These are the services that handle customer data on our behalf, as of November 5, 2026. The same list is Annex 5 of the Data Processing Addendum, which promises at least 15 days' notice before a new one is added. How we protect the data is on the Security page.
| Service | Where | What it does | What it receives |
|---|---|---|---|
| Hetzner Online GmbH | Germany | Hosting: the application server, the database, stored files and recordings. | Everything a workspace keeps in Utalis. |
| Google LLC (Google Cloud, Vertex AI and Gemini) | Google's global service for text, images and video, and its US Central region for live voice (we do not choose the country for the first). | The AI models that employees think with, the live voice of calls, and the screening of incoming content. | What an employee needs for a task: the request, relevant data from connected services, what it sees on screen, and voice during a call. Google may not train on it. |
| Google LLC (Google Cloud Run) | Frankfurt, Germany (europe-west3) | Cloud computers, when a workspace gives an employee one: a computer in the cloud that lives for one job. | The files and screens of that job while it runs. |
| Resend, Inc. | United States | Sending and receiving the email of employees' addresses. | The messages, addresses and attachments of that email. |
| LiveKit, Inc. (LiveKit Cloud) | United States (the company); it carries calls over its own data centers around the world | Meeting rooms: the live audio, video and screen sharing between people and employees. | Live audio, video and shared screens while a meeting is on. Recordings are stored by Utalis, not by LiveKit. |
| Apple Inc. (Apple Push Notification service) and Google LLC (Firebase Cloud Messaging) | United States and worldwide | Notifications on a person's phone or watch, only when they installed the app and allowed notifications. | The notification's title and short text, and the device's push address. |
Services a customer connects itself, such as its email, chat, calendar, code hosting or accounting tools, are not our sub-processors: the customer chooses them, and employees send data to them on the customer's instructions. Utalis does not take real card payments yet, so no payment processor handles card data.