Everyone who touches customer data on our behalf, named in full.
Selraiz uses the third parties below to deliver the service. Each is bound by a written contract that limits it to processing personal data on our documented instructions. We do not sell personal data and we do not share it for advertising.
This is where your data lives. It stays in the EU.
| Provider | Purpose | Location |
|---|---|---|
| Amazon Web Services (AWS) | Hosting, database, file storage and message delivery for the whole service | EU - Frankfurt (eu-central-1) |
| Amazon CloudFront | Delivery of the website and the embeddable widget; serves static files and connection metadata only | Global edge network |
To produce an answer, the conversation and the matching extracts from your training content are sent to a model provider. These providers are contractually prohibited from using that content to train their own models.
| Provider | Purpose | Location & safeguard |
|---|---|---|
| Anthropic | Generates agent replies from your trained content | United States — [SCCs / DPF - confirm] |
| Converts text into embeddings so the agent can find the right passage of your content | United States — [SCCs / DPF - confirm] | |
| OpenKBS | Platform layer that routes our requests to the model providers above | [ENTITY, LOCATION & SAFEGUARD] |
Voice conversations are recognised and spoken by the visitor's own browser using its built-in Web Speech capability. Audio never reaches our servers and we store no recordings, so there is no speech sub-processor. The browser vendor may process the audio under the visitor's own browser and operating system settings.
| Provider | Purpose | Location & safeguard |
|---|---|---|
| Stripe | Payment processing and subscription billing. Card details go directly to Stripe and never reach our servers | United States / Ireland — [SCCs / DPF - confirm] |
| Resend | Delivery of transactional email - password resets, lead alerts and service notices | United States — [SCCs / DPF - confirm] |
We will update this page before a new sub-processor starts processing customer personal data, and give customers at least 30 days' notice by email. If you object to a new sub-processor on reasonable data protection grounds, tell us within that window at privacy@selraiz.com. If we cannot offer a workable alternative you may terminate the affected part of the service without penalty, as set out in the DPA.