At Vibranium Labs, we partner with a limited set of third-party service providers (“sub-processors”) to help deliver, support, and secure our products. We apply strict data governance and security standards when selecting and managing these partners.
We evaluate all sub-processors for security, privacy, and compliance readiness. Each provider must meet industry-standard requirements for data handling and protection, including:
We maintain data processing agreements with each sub-processor, including flow-down obligations that match our customer commitments.
| Sub-Processor | Purpose | Data Location | Notes |
|---|---|---|---|
| Amazon Web Services (AWS) | Infrastructure, database, and storage | United States | Used for encrypted storage (RDS, S3), KMS |
| Pinecone | Vector database for embeddings | United States | Logical namespace isolation per customer |
| OpenAI | Language model inference (LLM) | United States | No training on customer data; BYO key option |
| Auth0 (Okta) | Authentication and authorization | United States | Issues short-lived JWTs for API auth |
| Recall.ai | Meeting transcription and real-time AI access | United States | Used with customer approval only |
| ElevenLabs | Text-to-speech generation | United States | Used only when voice responses are enabled |
| Unstructured.io | Document parsing and extraction | United States | For semantic search across uploaded content |
Enterprise customers may also provide their own API keys for OpenAI, Recall.ai, or other integrations, ensuring that data never leaves their managed environments.
We will provide advanced notice of any new sub-processors at least 30 days prior to onboarding, unless required sooner for security or operational continuity. Customers can request additional detail or object to new sub-processors via [email protected].