Subprocessors
Last modified
We use the following subprocessors:
| Subprocessor | Purpose | Data processed |
|---|---|---|
| OpenAI | Large language models, and AI tools for engineering and support (ChatGPT, Codex) | Demo conversations, page content, and voice transcripts; customer data needed for engineering and support work |
| Anthropic | AI tools for engineering and support (Claude, Claude Code) | Customer data needed for engineering and support work, which may include demo conversations |
| Browserbase | Browser automation | Content of web pages rendered during demo creation and sessions |
| Firecrawl | Website crawling | Public website content only |
| LiveKit | Realtime voice session infrastructure | Visitor voice audio |
| Deepgram | Speech-to-text | Visitor voice audio and transcripts |
| Cartesia | Voice generation | Agent speech text |
| ElevenLabs | Voice generation and speech-to-text | Agent speech text, visitor voice audio and transcripts |
| Microsoft Azure | Voice generation | Agent speech text |
| Google Cloud | Cloud storage | Stored demo assets and recordings of voice demo sessions |
| Google Workspace | Internal file storage | Reports and exports containing customer data, shared only within our team |
| Render | Application hosting | All service data (application and database hosting) |
| Postmark | Email delivery | Names and email addresses of account holders |
| Plausible | Privacy-friendly analytics | Anonymised page views, no cookies or persistent identifiers |
| Sentry | Error monitoring and performance tracing | Error reports and request metadata, IP addresses not stored |
| Stripe | Payment processing | Billing contact and payment details |
Service providers for our own operations
Where Handhold acts as data controller (our website, marketing, sales, support, and internal operations), we additionally use the following service providers:
| Provider | Purpose | Data processed |
|---|---|---|
| PostHog (EU-hosted) | Product and website analytics | Usage events, device and browser data, approximate location, and account holders' contact details. Browser tracking runs only with cookie consent. |
| HubSpot (EU-hosted) | Customer relationship management and support | Contact details, website activity, form submissions, and support correspondence |
| Slack | Internal team communication | Names and email addresses appearing in internal notifications |
| Google Workspace | Email and document management | Business and support correspondence |
| Cal.com | Call scheduling | Names, email addresses, and booking details of people who book calls with us |
| Zapier | Workflow automation | Contact and event data passed between the tools above |
| Anthropic | AI tools for internal business work (Claude) | Customer account, billing and contact details, and customer requests |
For AI agents: a clean Markdown version is available at /subprocessors.md.