Data and privacy

Sub-processors

The outside services that handle personal data for the Adeptify platform and this website.

When an organization or a consultant engages us, they are the controller of their participants' data and we are their processor. The companies below handle some of that data for us: they are our sub-processors.

For each, what it is used for, what personal data it handles, and where. How the platform uses the data overall is on data handling →

The platform

The platform's sub-processors

Cloudflare, Inc. (USA)

Used for

Hosting, the database, file storage, and the pipeline that prepares reports

Personal data

All platform data

Where

Stored in Cloudflare's European region. Requests are handled in Cloudflare's network, normally at the data center nearest the person using the platform.

Google, Gemini API

Used for

The AI interviewer; the analyses and the report writing; the AI practice partner in audio loops; prompts and feedback on written responses

Personal data

Interview transcripts, measurements and analyses; written responses; what a person says in an audio loop. The platform does not send names or email addresses.

Where

Not fixed by Google

Deepgram, Inc. (USA)

Used for

Turns spoken answers and dictated reflections into text, and provides some of the synthetic voices

Personal data

Voice audio, and the text read aloud

Where

EU endpoint

ElevenLabs (Eleven Labs Inc., USA)

Used for

Voices the AI interviewer and the AI practice partner in audio loops

Personal data

The text read aloud, which can quote the person's own words

Where

USA

Amazon Web Services

Used for

Linguistic measurement of interview transcripts, by our own software

Personal data

Interview transcripts

Where

London (UK)

Mailjet (Sinch group)

Used for

Sign-in codes and notifications

Personal data

Name, email address, and the text of the notification

Where

EU

Google, Gemini in Antigravity

Used for

Our AI design partner, which helps development mentors prepare debriefs and design learning loops

Personal data

A person's report and written responses, and a debrief's transcript when the debrief is recorded

Where

Not fixed by Google

Anthropic, Claude Code (USA)

Used for

Helps development mentors prepare debriefs and design learning loops

Personal data

A person's report and written responses, and a debrief's transcript when the debrief is recorded

Where

USA

Google Cloud Translation translates the platform's interface, and will translate this website's pages. It receives no personal data, so it is not a sub-processor.

This website

For this website we are the controller ourselves, so these services work for us directly. What the site collects is in the privacy notice →

The website's services

Cloudflare, Inc. (USA)

Used for

Hosts this website and runs its contact forms

Personal data

What visitors send to the site, including form messages and IP addresses

Where

Cloudflare's network, normally the data center nearest the visitor

CleanTalk

Used for

Checks form messages for spam before they reach us

Personal data

Name, email address, message and IP address

Where

USA and EU (CleanTalk spreads data across its servers in both)

Mailjet (Sinch group)

Used for

Delivers inquiries from the forms to us by email

Personal data

Everything entered in the form

Where

EU

one.com

Used for

Hosts our mailbox, where inquiries from the forms arrive

Personal data

Everything entered in the form

Where

Denmark (one.com's base)

The site's fonts come from Adobe Fonts. To deliver them, Adobe receives the visitor's IP address, and says it does not store it. For billing and to pay the type foundries, it logs which fonts are served, our web project and account, and the hostname of the page loading them. It sets no cookies to serve fonts.

How this list changes

  1. 1

    Notice of significant changes.

    Before we add or replace a company on this list, or make another change we judge significant, we tell our clients at least 30 days ahead, so that they can object. This holds even when the new company would only handle real participants' data in a test.

  2. 2

    Model updates need no notice.

    A newer model from a company already on this list is not a new sub-processor, and we do not announce it.

  3. 3

    Listed once in use.

    A service appears here only once it is in use. We name the provider and the service, not model versions.

  4. 4

    Checked every quarter.

    Every quarter, we check this page against the platform's code.

Questions about a sub-processor?

Write to privacy@adeptify.co →

Last updated: 27 October 2026