Companies that process data for Unity Discover customers (interview participant data, where the customer is the controller):
| Sub-processor | What it does for Discover | Data it handles | Location |
|---|---|---|---|
| Supabase | Database and authentication | Accounts, studies, participants (name, email, job title), interview transcripts, consent records, analysis, search index, documents, billing records | Ireland (AWS eu-west-1) |
| Vercel | Website and application hosting | All web traffic, including interview sessions | Application region Dublin (dub1); global edge network |
| Railway | Hosts the AI analysis service | Transcripts and participant names during analysis | United States |
| ElevenLabs | Runs the AI voice interviewer: speech in, speech out, live conversation | Participant voice audio, typed answers, transcript; interview prompt with participant name and job title. Stores conversation records, including audio. | United States |
| Google (Gemini) | Language model behind the voice interviewer (chosen inside ElevenLabs); classification of transcript excerpts for search | Live conversation; transcript excerpts | United States |
| Anthropic | Interview analysis, study synthesis, Ask Discover answers, document drafting | Transcripts, quotes, participant names and job titles | United States |
| OpenAI | Text embeddings for search; short context notes on transcript excerpts | Transcript text, search questions | United States |
| Cohere | Ranking search results for Ask Discover | Search questions and transcript excerpts | Canada / United States |
| Resend | Email delivery | Account emails and sign-in codes; participant invitations, access codes and transcript copies; receipts | United States |
| Sentry | Error monitoring | Error details and limited technical metadata (personal data minimised; replays mask all text and inputs) | Germany (EU) |
| Upstash | Rate limiting and abuse prevention | Short-lived counters keyed by user id, IP address or email | United States |
Companies that process our own data about Discover customers (we are the controller; covered by the Privacy Policy):
| Stripe | Payments, subscriptions, invoices, VAT | Billing contact, payment card (held by Stripe), invoices | Ireland (Stripe Payments Europe) and United States |
| Google (Analytics, Tag Manager, Ads) | Website analytics and advert measurement on our public website, sign-up and sign-in pages, only for visitors who accept cookies | Pages visited, how the visitor arrived, device type, approximate location, advert clicks | Ireland (Google Ireland) and United States |
Changes: we will update this page and email workspace owners at least 30 days before a new sub-processor starts processing customer data (DPA §5).