Sumchat Subprocessors
Last updated: September 27, 2026 · Version 1.0
Sumchat uses the following subprocessors to provide the Services. Each processes customer data only to provide its service to us, under contracts consistent with our Data Processing Addendum. Providers may process data in multiple countries under the safeguards described in our DPA and their applicable terms.
This list describes the providers used by Sumchat. Which providers receive content depends on the features you request.
| Subprocessor | What it does for the Services | Data it touches |
|---|---|---|
| Cloudflare, Inc. | Application hosting and infrastructure: compute, databases, storage, networking, TLS certificates, email routing; Workers AI speech recognition for video captions and transcripts; domain registrar for domains purchased through Sumchat | All customer content (stored and served); selected audio, optional transcription context, transcripts and caption timing; domain registrant contact details (as registrar) |
| OpenAI, LLC | AI assistant, managed agent infrastructure, hosted computer work, media analysis and real-time voice | Conversation and tool content, saved context, selected files, work in the hosted computer, call audio and in-call context |
| TypeSafe | Structured AI judgments that interpret requests and conversational context | Relevant conversation and work context supplied for those judgments |
| Blooio | iMessage delivery and receipt | Phone numbers, sender and conversation identifiers, message text, attachments and delivery metadata |
| Google LLC (or the applicable Google contracting entity) | Gemini API media analysis, image and video generation and editing, using Paid Services through a billing-enabled project | Prompts, selected media, and context for requested generation or editing tasks, including Google Workspace-derived content when supplied to those tasks |
| Monid, Inc. | Gateway for built-in media generation and web research; routes requests to the downstream providers listed below and returns their results | Submitted prompts, narration/dialogue text, search queries, URLs, request parameters, generated media, research results, and run/usage metadata; these may include workspace-derived information |
| ElevenLabs (through Monid) | Speech, dialogue, music, and sound-effect generation | Submitted text, prompts and voice settings, and generated audio |
| BytePlus ModelArk / ByteDance Seedance (through Monid) | Text-to-video generation | Submitted video prompts and generation settings, and generated video/audio |
| Context Dev Inc. (Context.dev) and Exa Labs Inc. (through Monid) | Web search and web-page content retrieval | Search queries, requested URLs, extraction parameters, and returned web content; queries and URLs can contain workspace-derived information |
| Amazon Web Services, Inc. | Video rendering compute and render-related object storage | Media, composition assets, render jobs, and generated outputs submitted for rendering |
| Stripe, Inc. | Payment processing and billing | Billing contact, payment method (held by Stripe; Sumchat never receives card numbers), invoice history |
| Twilio Inc. | Telephone network connectivity (SIP) for the voice line | Call audio in transit, phone numbers, call metadata |
| bundle.social (Bundle Social OÜ) | Social publishing API: posting to connected social networks and reading their analytics | Social account connections you authorize, post content and media, engagement metrics |
| Apify Technologies s.r.o. | Structured web-data collection for the research features | Public web data requested by your Agents; no workspace content beyond the queries your work generates |
Monid also routes the configured public social, search-optimization, and reputation research requests to TikHub, Apify, Ahrefs, G2, Trustpilot, and Capterra. Those requests contain the queries, profile or page identifiers, domains, URLs, and other lookup parameters selected for the research, and return public data. Lookup parameters may be derived from workspace content. These are built-in service routes, separate from integrations you add yourself.
We also transmit data to third parties at your direction; message recipients, the social networks you connect, Google Workspace for authorized account operations, and recipients of content you explicitly share. Those are your chosen recipients under your instructions, not subprocessors.
Change notice: we update this page at least 14 days before a new subprocessor begins processing customer personal data, and workspace administrators can subscribe to change notices by emailing privacy@sumchat.ai with the subject "subscribe subprocessors." Objection rights are in DPA § 5.2.