About this register
The providers below support the features described for each service. A provider receives data when the relevant feature is used.
This register includes subprocessors and other service providers. Payment providers and optional identity or messaging providers may also act as independent controllers for activities such as fraud prevention, identity verification, service operation and regulatory compliance. Their own privacy terms explain those activities.
Locations distinguish confirmed hosting regions from a provider’s place of establishment. An EU company address does not mean that every processing operation takes place in the EU. Some services use international infrastructure; this register does not promise EU-only processing. Our Data Processing Agreement and Privacy Policy explain the applicable processing and transfer terms.
Service providers
Cloud hosting and delivery
Vercel
- When used
- Website, application and background job delivery.
- Data processed
- Website requests, IP addresses, browser information, application data handled by our servers, job references and operational logs.
- Location
- Verified application hosting in Washington, D.C., United States, with global content delivery. EU-only processing is not guaranteed.
Cloud hosting for live processing
Render
- When used
- Live transcription and translation sessions.
- Data processed
- Live speech audio, transcripts, translations, room and participant references, and operational logs.
- Location
- The active live transcription worker is hosted in Frankfurt, Germany (EU). This hosting location is separate from the locations of AI services called by the worker.
Database, authentication and file storage
Supabase
- When used
- Account and organisation management, service records, and Studio media storage.
- Data processed
- Account names and email addresses, authentication records, organisation details, session records, transcripts, translations, billing references, agreement records and uploaded media.
- Location
- The Bayaan production project is hosted in Ireland (EU). Supabase is an international provider; its project region does not establish EU-only processing for every related service or support operation.
Speech-to-text
Speechmatics (Cantab Research Ltd)
- When used
- Sessions using a Speechmatics transcription option.
- Data processed
- Speech audio, language settings and the resulting transcript.
- Location
- UK-based provider with international infrastructure. The processing region depends on the service configuration; EU-only processing is not guaranteed by this register.
Speech-to-text and translation
Google Cloud / Gemini
- When used
- Gemini live transcription and applicable Studio transcription or translation features.
- Data processed
- Live speech or uploaded audio/video, transcripts, language settings, translation instructions, context and generated output.
- Location
- International processing. Live Gemini transcription uses a global service; regional residency is not guaranteed.
Translation and audio processing
OpenAI
- When used
- Live translation and applicable Studio audio transcription features.
- Data processed
- Transcript text, translation instructions and recent context; audio when an OpenAI audio transcription feature is used.
- Location
- International processing, including locations outside the EEA. OpenAI Ireland Ltd is the contracting entity for EEA customers; this does not guarantee that processing remains in Ireland or the EU.
Real-time streaming
LiveKit
- When used
- Live rooms, media transport, messages and recording orchestration.
- Data processed
- Audio/video, room and participant references, captions, translations, chat and other session messages, connection information and technical telemetry.
- Location
- Global infrastructure. Media transport and stored project data have separate regional controls; EU-only residency is not guaranteed by this register.
Recording storage
Cloudflare R2
- When used
- Classroom recordings stored through the recording feature.
- Data processed
- Recorded audio/video, recording filenames and associated file metadata.
- Location
- International storage infrastructure. A specific EU storage jurisdiction has not been established for this register; EU-only storage is not guaranteed.
Subscription payments
Stripe
- When used
- Customers choosing card or other Stripe checkout methods.
- Data processed
- Customer and organisation details, billing information, payment details submitted at checkout, transaction references and subscription records.
- Location
- Ireland, the United States and other international locations, depending on the service. The EEA contracting entity does not imply EU-only processing.
Subscription payments
PayPal
- When used
- Customers choosing PayPal checkout.
- Data processed
- Organisation and subscription references, payer account information, payment details and transaction records.
- Location
- The EEA service entity is based in Luxembourg. Processing and recipients may also be located outside the EEA, including the United States.
Donations, direct debits and merchant verification
Pay. (Pay.nl)
- When used
- Organisations and donors using the donation, collection or merchant onboarding features.
- Data processed
- Donor contact details, payment and bank mandate information, merchant business details, and representative or beneficial-owner identity documents where required for verification.
- Location
- Netherlands-based payment provider. Payment networks and other recipients may have separate processing locations; this listing is not a Netherlands-only processing guarantee.
Email delivery
Resend (Plus Five Five, Inc.)
- When used
- Account verification, password resets, invitations, service notices and applicable billing or donation emails.
- Data processed
- Recipient names and email addresses, email subjects and content, verification or reset links, and delivery information.
- Location
- United States. Resend identifies the United States as the location of its primary processing operations.
Customer support email
Google Workspace / Gmail
- When used
- Routing email sent to Bayaan support addresses on bayaan.ai.
- Data processed
- Sender and recipient addresses, names, message subjects, message content, attachments and delivery information.
- Location
- Google operates international infrastructure. The support mailbox’s storage and processing region has not been verified; EU-only residency is not guaranteed.
Optional customer support messaging
WhatsApp (Meta)
- When used
- People who choose to contact Bayaan through the WhatsApp link on our website. WhatsApp may act as an independent controller for its own service operations.
- Data processed
- Phone numbers, profile and connection information, and support messages or attachments you choose to send. Message-content handling depends on the WhatsApp service and encryption in use.
- Location
- WhatsApp Ireland Limited serves users in the European Region. Its services involve international operations and transfers, including to the United States; the Irish entity does not establish EU-only processing.
Optional identity provider
Google Sign-in
- When used
- People who choose to sign in or create an account with Google.
- Data processed
- Google account identifiers, authorised profile information such as name and email, and authentication request information.
- Location
- Google operates international infrastructure. No Bayaan-specific EU residency guarantee applies to this optional identity-provider service.
Analytics and performance monitoring
Vercel Web Analytics and Speed Insights
- When used
- Website and application usage and performance measurement.
- Data processed
- Page URLs, referrers, browser and device information, approximate location, timestamps and page performance measurements.
- Location
- Vercel infrastructure, including international processing. No EU-only analytics residency is stated here.
Address lookup and maps
OpenStreetMap Foundation / Nominatim
- When used
- Locating an organisation from its supplied address and displaying maps.
- Data processed
- Organisation street address, postcode, city and country for address lookup; network request information when maps are loaded.
- Location
- The OpenStreetMap Foundation identifies the United Kingdom and Netherlands for relevant personal-data storage, with EU backups. Map tiles may be delivered through a global network.
Optional diagnostic integration
The following integration processes data only if enabled. Its presence here does not mean it is active for every account or session.
Optional error monitoring
Datadog
- When used
- Only when the optional diagnostic logging integration is enabled. It is not required for account creation.
- Data processed
- Browser errors, diagnostic messages, session or connection references and technical log context.
- Location
- Depends on the configured Datadog service region. An enabled production integration and its processing region have not been confirmed for this register.
Questions and support
For questions about a provider, processing location or this register, email info@bayaan.ai. Our support email routes through Google, as described above. If you choose WhatsApp support, WhatsApp also handles information needed to provide that messaging service. Your own email or messaging provider processes information under its applicable terms.