Skip to content

← Back to Privacy Policy

Sub-processors

Last updated: 2026-07-21

A sub-processor is a third party we engage to process your data on our behalf. Under GDPR Article 28 you have the right to know who they are. This page lists every vendor currently in production, what they do for us, what data they touch, and where they process it. If a vendor is added or removed we update this page within 30 days.

We do not sell your data. We do not allow any of these vendors to use your audio, transcripts, or answers to train their public models. Each vendor is under contract via their Data Processing Agreement (DPA) linked below.

VendorPurposeData categoriesRegionLegal
SupabasePrimary database, authentication, and file storage (payment screenshots, voice audio).
  • Account credentials
  • Profile data
  • Session transcripts
  • Voice audio
  • Payment screenshots
  • Documents (CV, SOP, I-20)
US (primary Postgres) + AWS regions per Supabase project config
VercelApplication hosting, edge routing, and access logs for the web app.
  • IP address
  • User agent
  • Access logs
  • Request payloads in transit
Global edge network; primary region US-East
Fly.ioVoice-relay WebSocket service for live consular interview sessions.
  • Voice audio in transit
  • Session transcripts in transit
  • Access logs
Singapore + Mumbai (multi-region deployment)
OpenAILanguage-model grading for typed and voice mock interview answers.
  • Answer text
  • Question context
  • Grading prompts
US (OpenAI API endpoints)
AnthropicLanguage-model grading and adaptive-agent turns for the live consular interview lane.
  • Answer text
  • Question context
  • Grading prompts
US (Anthropic API endpoints)
DeepgramSpeech-to-text transcription of your voice answers.
  • Voice audio (streamed, not retained)
  • Session id metadata
US (Deepgram API endpoints)
ElevenLabsText-to-speech synthesis for the officer voice in the live consular interview lane.
  • Officer prompt text
  • Session id metadata
US (ElevenLabs API endpoints)
Brevo (Sendinblue)Transactional email delivery for account confirmations and password resets.
  • Email address
  • Account name
  • Email body content
EU (France) with US secondary

Notice of change

If we add or remove a sub-processor we will update this page within 30 days. If you maintain an active account and want notification of changes, email privacy@abroadready.ai — we will add you to a change-notification list.

For any privacy request or question, contact privacy@abroadready.ai.