Subprocessors

Third-party companies that process data on behalf of RiverScript.

Last updated: September 28, 2026

RiverScript uses the following third-party companies ("subprocessors") to deliver its service.

This page is the current subprocessor list referred to in our Data Processing Terms.

Services you connect to your account yourself are not subprocessors and are not listed here. See Optional Integrations You Connect in our Privacy Policy.


Infrastructure & Storage

ProviderCountryData processed
Hetzner Cloud GmbHFinland (EU)Account data, transcripts
Cloudflare Inc.USAAudio files

AI Transcription

Audio files are sent to AI providers solely to produce the transcript you requested.

ProviderCountryData processed
Modal Labs Inc.USAAudio files
Together AI Inc.USAAudio files
ElevenLabs Inc.USAAudio files
Deepgram Inc.USAAudio files
Cloudflare Inc.USAAudio files

AI Text Processing

ProviderCountryData processed
OpenAI LLCUSATranscript text
Nebius B.V.Netherlands (EU)Transcript text
Parasail Inc.USATranscript text
Weights & Biases Inc.USATranscript text

Authentication & Communication

ProviderCountryData processed
Google LLCUSAEmail address, display name
Microsoft CorporationUSAEmail address, display name
Resend Inc.USAEmail address

Payments

ProviderCountryData processed
Polar.sh Inc.USAEmail address, payment data

Diagnostics & Analytics

ProviderCountryData processed
Functional Software, Inc. (Sentry)Germany (EU region)Error diagnostics, account identifier, IP address, masked session replays
Umami (self-hosted)Finland, EU (our servers)Anonymous page views only
PostHog Inc.USAProduct usage events, account identifier, email address

Changes to This List

We keep this page current. Before a new subprocessor begins processing customer content, we update this page and notify business customers who have asked to be told, so that there is a reasonable opportunity to object. How objections are handled is set out in the Data Processing Terms.

To be notified of changes, email [email protected] with the subject line "Subprocessor notifications".


All transfers to providers located in the United States are conducted under Standard Contractual Clauses (SCCs) adopted by the European Commission, or under the EU-US Data Privacy Framework where the provider is certified.

Questions? Contact us at [email protected].