Subprocessor Register

Last updated: 29 September 2026.

Octanist B.V. uses the providers below to deliver its services. Providers receive information relevant to their function and the features enabled for a customer, rather than necessarily receiving every category of customer data. The Data Processing Agreement governs authorisation, confidentiality, security and subprocessor changes.

Providers processing customer data

Vercel Inc.

Function and relevant data: Application hosting, requests, background processing and associated operational data

Processing location and arrangement: Primary application execution in Frankfurt, Germany. Other Vercel services and support may involve international processing. AI Gateway is described separately below.

PlanetScale Inc.

Function and relevant data: Database hosting for leads, forms, sessions, call metadata, transcripts, summaries and other account records

Processing location and arrangement: Primary database on AWS in Frankfurt, Germany. Infrastructure, backups and support are subject to the applicable PlanetScale arrangements; the primary region is not a guarantee that every support or ancillary operation occurs there.

Cloudflare

Function and relevant data: Network and security services, pixel delivery and ingress, custom domains and relevant request information

Processing location and arrangement: Distributed network processing. Locations depend on the service and request; no Germany-only processing commitment applies to the whole Cloudflare service.

Telnyx

Function and relevant data: Tracking numbers, call routing, call metadata, recordings and announcement media

Processing location and arrangement: Telecommunications processing depends on numbers, routes and provider facilities. Audio is hosted by Telnyx. Provider-held audio and metadata have their own configuration and retention arrangements.

Eleven Labs Inc.

Function and relevant data: Speech-to-text processing and speaker segmentation for enabled call transcription

Processing location and arrangement: Audio is sent to the ElevenLabs API. This path is not represented as EU-only or zero retention. Octanist separately stores the resulting transcript and related results.

Vercel AI Gateway

Function and relevant data: Routes model requests for enabled call summaries and AI-assisted form mapping

Processing location and arrangement: A separate processing path from Frankfurt application hosting. The configured OpenAI route requests zero retention for covered model processing; this is not a blanket promise covering every gateway operational record.

OpenAI, through Vercel AI Gateway

Function and relevant data: Model processing of transcript content or form-mapping inputs and production of outputs

Processing location and arrangement: Downstream model provider through the gateway. The gateway relationship does not imply a separate direct customer contract with OpenAI or EU-only model execution. Octanist stores the outputs needed for the enabled feature.

Resend, operated by Plus Five Five, Inc.

Function and relevant data: Delivery of transactional email, including recipient information and message content needed for the relevant notification

Processing location and arrangement: Resend describes its primary processing operations as taking place in the United States. Only data needed for the applicable email function is sent.

Infrastructure and downstream providers used by these providers form part of their respective processing chains. In particular, AWS infrastructure supplied through PlanetScale is distinct from a direct Octanist hosting engagement. Telecommunications providers may also process particular network, security or legally required records in an independent capacity.

Other service providers and customer-selected recipients

PostHog supports product analytics and error analysis. Stripe handles payments and billing. Sanity supports website content delivery. These activities do not mean those providers receive all customer lead records; their role depends on the information and function involved. Scheduling or embedded services may also process information when a visitor uses them.

Customer-enabled advertising, analytics, CRM and automation integrations, including Google, Meta, Microsoft, LinkedIn, Snapchat, BigQuery, Zapier and authorised API or MCP clients, are destinations selected or authorised by the customer. They are not automatically Octanist-appointed subprocessors. The customer must establish the appropriate permissions and arrangements for its chosen recipients. Octanist remains responsible for its own obligations when carrying out those instructions.

International processing and provider information

Primary hosting in Frankfurt does not mean every provider, support function, network route, log or backup is confined to Germany or the EEA. The providers above have international operations, including in the United States. Applicable transfer safeguards depend on the recipient, service and contractual chain. Octanist must use a valid transfer basis for restricted transfers, including an applicable adequacy decision or standard contractual clauses and any necessary supplementary measures.

Customers may contact support@octanist.com for information about the arrangements and safeguards relevant to their processing or a copy of applicable safeguards, subject to necessary confidentiality redactions. Provider-wide documentation describes their services generally and does not replace the configuration and agreements applicable to Octanist.

Provider information:

Changes and objections

Under the DPA, Octanist will give at least 30 days' direct advance notice of intended additions or replacements, with an opportunity to object on reasonable data-protection grounds. The DPA describes the resolution process and any urgent protective replacement. Individually agreed authorisation requirements remain applicable unless validly amended.

Contact support@octanist.com about this register or a data-protection objection. See the Data Processing Agreement and Privacy Policy.