Sub-processors
Version 1.5 · 4 November 2026
These providers process personal data on behalf of HighKnow SRL to run Tenure. For meeting content they act for the customer organisation, which is the controller, under the data processing agreement (Annex 3), and this page is the public copy of that list.
The providers
| Provider | What it does | Personal data it receives | Where |
|---|---|---|---|
| Cloudflare, Inc. (United States) | Runs the application: this site, the app, the live meeting room, object storage, and the gateway through which requests reach the language models. | All meeting content in transit, the live meeting state, and the nightly copy of the database, encrypted with a key Cloudflare does not hold. | Stored in the EU. Each request is answered at the nearest data centre, which can be outside the EU, and is never stored there. |
| Neon, contracted with Databricks, Inc. (United States), the parent company of Neon, LLC (managed Postgres) | The database: transcripts, claims, the knowledge base, accounts and configuration. | Everything stored. | Frankfurt, Germany. Any access from outside the EEA is covered by the standard contractual clauses in Databricks' data processing addendum. |
| Soniox, Inc. (United States) | Real-time speech-to-text and speaker separation. Stores no audio or text (none is configured), and does not train on customer data. SOC 2 Type II and ISO/IEC 27001. | The meeting audio, as a stream. | EU regional deployment. Limited processing for security, support and legal compliance can take place outside the EU, under the standard contractual clauses (Module 3) in its data processing agreement. |
| Google Cloud (Vertex AI) | Language models: extraction, cards, answers, summaries and embeddings. Anthropic's models are used through Vertex AI, so Anthropic is not a separate sub-processor. | Prompts built from meeting content and documents, and what the models write. | Within the EU (Google's europe-west1 and europe-west4 endpoints). |
| Scaleway SAS (France) | Delivers invitation emails, and runs the job that makes the nightly encrypted copy of the database. | For an invitation, the invitee's email address, the organisation's name and the inviter's name. For the nightly copy, every stored record while the job runs, which the job encrypts before any of it leaves the job, and writes to no disk. | Paris, France. |
| Google Cloud EMEA Limited (Google Workspace) (Ireland) | Hosts the contact@highknow.ai and privacy@highknow.ai mailboxes, and nothing else. | Only what someone writes to those two addresses. | Any country where Google or its sub-processors have facilities, which can be outside the EU: HighKnow's edition offers no choice of data region. Transfers to the United States fall under the EU–US Data Privacy Framework, and other transfers under Google's standard contractual clauses. |
| Functional Software, Inc. (Sentry) (United States) | Collects error and crash reports from the app, the desktop app and the servers, so faults can be found and fixed. | The type and location of a fault in our code, the app version, and the device and browser type. Never meeting content, never the text of an error, and IP addresses are not stored. | Stored in the EU (Frankfurt). Sentry, a US company, relies on the EU–US Data Privacy Framework and standard contractual clauses. |
All customer data is stored exclusively in the EU, except the correspondence in the contact@ and privacy@ mailboxes, which Google Workspace may store in any country where Google or its sub-processors have facilities. Request processing is performed in the EU, or where network routing requires otherwise, under GDPR Chapter V safeguards. Under its agreement with HighKnow, no provider may use customer content to train or improve models.
Not a sub-processor: Stripe
Stripe takes payments for paid plans as an independent controller, under Stripe's privacy policy. It receives billing data only (the paying organisation, its billing contact, address and VAT number, and the card details entered on Stripe's own page) and never meeting content.
How a change is announced
- HighKnow publishes an intended addition or replacement on this page, and emails the owners of every organisation, at least 30 days before it applies. The notice says who the provider is, what it will do, which data it will receive, where, and the date it applies.
- An organisation that objects writes to privacy@highknow.ai before that date, and HighKnow discusses the objection in good faith.
- If the objection is not resolved, the organisation may terminate before the change applies, and HighKnow refunds pro rata the fees paid in advance for the period after termination.
Announced changes: none at present.