Sub-Processors
To operate our Services securely and reliably, Bleepy engages a small number of trusted third-party providers that process personal data on our behalf.
Overview
To operate our Services securely and reliably, Bleepy ("we," "us," or "our") engages a small number of trusted third-party providers ("sub-processors") that process personal data on our behalf.
We only use sub-processors that:
- Meet security, privacy, and compliance standards consistent with UK GDPR and EU GDPR;
- Operate under written data-processing terms; and
- Provide appropriate technical and organisational safeguards, including, where required, Standard Contractual Clauses (SCCs) for international transfers.
This list reflects our current sub-processors and may change as our Services evolve.
1. Infrastructure and Hosting
| Provider | Purpose | Region of Processing | Safeguards |
|---|---|---|---|
| Supabase | Database, authentication services, and file storage | EU / UK (Ireland and London regions) | DPA signed, data remains in EU/UK data centres |
| Vercel Inc. | Website hosting and deployment | Global (edge network) | DPA signed, SCCs and regional routing controls |
| Cloudflare, Inc. | CDN, DNS, DDoS protection, and SSL/TLS services | Global (edge network with data centers worldwide) | DPA signed, GDPR-compliant, SCCs in place |
2. Authentication and Communications
| Provider | Purpose | Region of Processing | Safeguards |
|---|---|---|---|
| Microsoft 365 / Azure | Email services and certificate delivery | EU / UK | DPA automatically included in Microsoft Online Services Terms |
3. AI and Analytics Services
| Provider | Purpose | Region of Processing | Safeguards |
|---|---|---|---|
| OpenAI | AI-powered conversation features, content generation, and consultation scoring | US | DPA signed, SCCs in place |
| Hume AI | Real-time voice processing and emotion analysis (Zero Data Retention enabled) | US | Zero Data Retention - no data stored on their platform. Chat transcripts stored only in our database (Supabase) |
| Google Analytics | Website analytics and usage statistics | US / EU | SCCs and GDPR-compliant processing |
Note: Hume AI is configured with Zero Data Retention. Audio recordings and chat history are NOT stored on Hume's platform. Chat transcripts are stored ONLY in our secure database (Supabase) for 1 year, then automatically deleted.
Updates
We review our sub-processors periodically and update this page as needed.
Material changes are communicated to organisational customers where required by agreement.
The "Effective Date" above reflects the most recent revision.
Contact
For questions about our sub-processors, please contact us at:
Email: support@bleepy.co.uk
This Sub-Processors list is effective as of 19 November 2025.