Back to home

Sub-processors

Last updated August 3, 2026

These are the third-party services we rely on to run SMB AI Hub. Some of them process personal data on your behalf, so we list them here for transparency.

How this works

When you use SMB AI Hub, you are the data controller of the contact data you upload, and we act as your processor. The companies below are our sub-processors — they process that data on our behalf to deliver the service.

We flow equivalent data-protection terms down to each, and we’ll update this page before adding a new sub-processor that handles customer personal data — so this page doubles as your advance notice.

Several of these are used only if you turn on the feature they power. If you never connect a Google or Microsoft account, never buy a phone number, and never generate a podcast, the sub-processors behind those features never receive your data.

Current sub-processors

Infrastructure & hosting

  • Supabase — Database, authentication, and file storage — the system of record. United States.
  • Vercel — Application hosting, serverless compute, CDN, bot protection, and request logs. United States + global edge.
  • Amazon Web Services — Serverless video rendering for AI podcast episodes (script text and generated audio are processed to produce the finished video). United States.
  • Cloudflare — DNS records for customer AI Front Desk subdomains (<slug>.smbaihub.com). United States + global.

Payments & email delivery

  • Stripe — Subscription billing and payment processing. United States + global.
  • Resend — Transactional email — sign-in links, receipts, and system notices. United States.
  • ZeroBounce — Email-address verification for campaign deliverability (metered verification). United States + EU.

AI providers

  • OpenAI — AI generation for content and the assistant, and realtime voice (API; not used to train their models). United States.
  • Anthropic — AI generation for content and the assistant (API; not used to train their models). United States.
  • Google (Gemini) — Gemini AI generation and realtime voice (API; not used to train their models). United States + global.
  • xAI — Grok AI generation and realtime voice (API; not used to train their models). United States.

Voice

  • ElevenLabs — Text-to-speech generation for agent and podcast voices — the text spoken is processed to produce audio. United States + EU.
  • Fish Audio — Text-to-speech generation for agent and podcast voices — the text spoken is processed to produce audio. Global.

Connected accounts (only when you connect them)

  • Google (Workspace & Maps) — Sending email from your Gmail address, calendar events, contact import, deliverability statistics, and address autocomplete — see section 5 of our Privacy Policy. United States + global.
  • Microsoft — Sending email from your Outlook/Microsoft 365 address, calendar events, and message-delivery diagnostics. United States + global.
  • Zoom — Creating and managing meetings you book through the Service. United States + global.

Telephony

  • Twilio — Phone numbers, calls, and messaging for AI phone agents — call and message metadata and content. United States + global.
  • Telnyx — Phone numbers, calls, and messaging for AI phone agents — call and message metadata and content. United States + global.

Media

  • Pexels — Stock photo search for brand assets and email images — only your search terms are sent; no customer contact data. United States.
  • Pixabay — Stock photo search for brand assets and email images — only your search terms are sent; no customer contact data. Global.

Questions

Email us at info@smbaihub.com and we’ll help.