SUBPROCESSORS
Everyone who touches the service.
The complete list of subprocessors we use to run Vera AI, what each one does, and what data it handles. Last updated October 1, 2026.
Current subprocessors
| Subprocessor | Purpose | Data touched |
|---|---|---|
| Supabase | Database and private file storage (Postgres, storage buckets), encrypted at rest | Contract documents, application data |
| Vercel | Application hosting and edge network | Application traffic |
| Anthropic | AI model API (Claude), called server side for document analysis and every written AI answer; API data is not used to train models | Contract text and questions sent for AI features; larger documents are held as files on our Anthropic account so they are not re-sent on every turn |
| OpenAI | Vera's voice on calls and in meetings, speech to text, text read aloud, and the public web lookup she runs during a call | Audio from the calls and meetings where you use the voice features, their transcripts, the text read aloud, and the deal facts Vera looks up to answer |
| Voyage AI | Embeddings that power document search | Contract text, split into passages when a document is indexed, and the search questions asked against it |
| Recall.ai | The meeting participant that joins a Zoom, Teams or Meet call when you seat Vera in it | Audio and transcript, with participant names, of the meetings you seat Vera in |
| ElevenLabs | Speech to text for the live call copilot, and the vendor's voice in negotiation rehearsal | Audio segments from calls where the copilot is listening, and rehearsal lines |
| HeyGen (LiveAvatar) | Renders the optional video face while Vera speaks | The audio of Vera's spoken answers; no microphone audio and no documents |
| Cloudflare | Relays meeting audio between the meeting seat and the voice model, and serves the marketing site and the public contract decoder | Meeting audio in transit for meetings where Vera is seated, and decoder traffic in transit |
| Resend | Transactional email delivery, and receiving the email you forward in | Recipient name and email, notification content, forwarded messages |
| Upstash | Rate limiting and a short-lived cache (Redis) | Request counters keyed by user or IP, and cached AI results that expire on a timer |
We notify customers before adding a subprocessor that touches contract data. Questions to info@vendorbenchmark.com.
OpenAI, Recall.ai, ElevenLabs, HeyGen and Cloudflare’s audio relay are on the path only for the voice, call and meeting features. A workspace that never uses those features sends them nothing.