Subprocessors
Last updated October 7, 2026
These are the outside companies that store or process data for Express Transcriber, what each one does, and what data it receives. How we handle that data is described in our Privacy Policy. To be told before we add a company that will receive meeting content, email support@expresstranscriber.com.
1. Current subprocessors
| Company | What it does | Data it receives |
|---|---|---|
| Supabase | Database, sign-in, and file storage | Account and organization details, recordings, transcripts, agendas, templates, minutes, and generated documents United States (Oregon). Encrypted at rest with AES-256. Database backups are kept for 7 days. |
| Netlify | Website hosting and the servers that run processing jobs | All of the above while a request or job is running; request logs |
| Amazon Web Services (S3) | Temporary storage of recordings during transcription | Recordings United States (Ohio). Encrypted at rest with AES-256. |
| Mux | Converting recordings for playback and transcription | Recordings Copies are deleted 14 days after they are created and made again if the meeting is opened later. |
| Deepgram | Speech-to-text transcription | Recordings and the resulting transcripts Opted out of Deepgram's Model Improvement Program: audio is kept only while it is transcribed and is not used for training. Encrypted in transit and at rest; SOC 2 Type 2. |
| Anthropic | Drafting minutes with AI | Transcripts, agendas, templates, and draft minutes Does not train its models on this data. Deletes it within 30 days. |
| OpenAI | Drafting minutes (backup), reading agendas, checking speakers and motions, and the Ask AI editor | Transcripts, agendas, templates, and draft minutes Does not train its models on this data. Keeps abuse-monitoring logs for up to 30 days. Our request logs in our OpenAI account are deleted when the meeting is deleted. |
| Grafana Labs | Monitoring the quality, speed, and cost of AI requests | The text sent to and returned by AI models, which includes transcripts and draft minutes Deleted after 30 days. |
| Stripe | Payments and invoicing | Billing contact, payment method, and invoice history. No meeting content. |
| Cloudflare | Bot protection on sign-up and sign-in (Turnstile) | Browser and device signals, IP address. No meeting content. |
| Google Analytics | Measuring visits to our website | Pages visited, browser and device information, approximate location. No meeting content. |