Legal · Dobi by Veyra
Sub-processors
In short
- You always know who helps us run Dobi. We email you 30 days before adding or replacing one.
- You can object. If we can't resolve it, you can leave with a pro-rata refund.
- These are the companies that help us run Dobi and may process your end users' data.
- Dobi's database is stored in the EU or UK.
- Some providers are US companies. Transfers are protected by recognised UK safeguards.
- If you use your own AI key, that provider works for you, not us.
1. About this list
1.1Veyra Ltd ("Veyra", "we") uses the Sub-processors below to provide Dobi. They process Client Personal Data on our behalf, as described in our Data Processing Agreement ("DPA"). This list is Annex 3 of the DPA.
1.2We have a written contract with each Sub-processor that protects the data at least as well as our DPA. We remain responsible for them.
2. Current Sub-processors
| Sub-processor | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Supabase | Database, Portal log-in and file storage. Holds Dobi's stored data, including usage events, conversations, feedback, bug reports, taught content and preview screenshots. | Data stored in the EU or UK. US company. | Storage in the EU or UK. Any access from outside the UK: UK Addendum to the EU SCCs. |
| Vercel | Hosting of the Dobi script, API and Portal. Handles web requests, including technical data such as IP address. | Edge network, with Dobi traffic served mainly from London and Dublin. US company. | UK Extension to the EU-US Data Privacy Framework where certified; otherwise UK Addendum to the EU SCCs. |
| Anthropic | AI model that generates Dobi's answers, and that also screens messages for abuse, summarises feedback and usage into insights for the Client, and drafts the weekly lessons Dobi learns. Receives End Users' questions, the conversation, feedback comments, and relevant page and taught content. | United States. | UK Extension to the EU-US Data Privacy Framework where certified; otherwise UK Addendum to the EU SCCs. |
| ElevenLabs | Text-to-speech, only when the Client turns on this voice option. Receives the text of answers to be read aloud. | United States and EU. | UK adequacy regulations for EU processing; for US processing, UK Extension to the EU-US Data Privacy Framework where certified, otherwise UK Addendum to the EU SCCs. |
| Resend | Sending service and account emails, such as Portal invites, renewal reminders and alerts. | United States. | UK Extension to the EU-US Data Privacy Framework where certified; otherwise UK Addendum to the EU SCCs. |
Other providers
| Provider | Role | Location | Transfer safeguard |
|---|---|---|---|
| Stripe | Payments and billing for the Client's subscription. Processes the Client's billing contacts and payment details, not End-User Data. We use it as controller of our own billing data. | UK, EU and United States. | UK Extension to the EU-US Data Privacy Framework where certified; otherwise UK Addendum to the EU SCCs. |
| The Client's own AI or voice provider (for example OpenAI, Anthropic or ElevenLabs), via the Client's own key | Only if the Client connects its own API key. The provider acts under the Client's own contract, as the Client's processor, not as our Sub-processor. | As set by the Client's contract with the provider. | The Client's responsibility. |
| End User's browser | Voice input uses the speech recognition built into the End User's browser. Depending on the browser, the browser maker may process audio under its own terms. We receive only the resulting text. | Depends on the browser. | Not engaged by us. |
3. Changes to this list
3.1We will email your account owner at least 30 days before we add or replace a Sub-processor. We will also update this page and its "Last changed" date.
3.2You may object on reasonable data protection grounds by emailing george@veyraconsult.com within those 30 days. We will work with you in good faith to resolve your concern. If we cannot, you may end the Agreement before the change takes effect, and we will refund the prepaid Fees for the unused part of your Subscription Year (section 9.4 of our Subscription Terms). An objection on its own, without leaving, does not give a refund.
4. Questions
Email george@veyraconsult.com. A real person will reply.