Subprocessors

    Last updated: September 8, 2026

    1. Overview

    Summary

    We engage a limited number of trusted sub-processors to deliver Pocodot's services. Each is bound by data protection obligations equivalent to our DPA.

    Pocodot Labs, Inc. ("Pocodot", "we") engages certain third-party service providers ("sub-processors") to assist in delivering the Pocodot platform. Each sub-processor processes personal data only to the extent necessary to perform the services described below and is bound by contractual obligations consistent with our Data Processing Agreement.

    This page lists the sub-processors currently authorised by Pocodot. We update this page whenever a sub-processor is added, removed, or materially changed.

    2. Current Subprocessors

    Summary

    Our sub-processors include AI model inference, integration, payment processing, email delivery, and hosting providers.

    NamePurposeLocationDPA
    AnthropicAI model inference (assistant replies and reasoning)United StatesView
    OpenAIBackup AI provider (vision, audio)United StatesView
    Google GeminiMeeting and video understandingUnited StatesView
    ComposioThird-party integration connections (routes API calls)United StatesView
    DigitalOceanServer and database hostingSingaporeView
    StripePayment processing and billingUnited States / IrelandView
    ResendTransactional email deliveryUnited StatesView
    Vapi, Inc.Phone calls with Cole: call handling, speech recognition and the voice assistant during a callUnited StatesView
    Twilio, Inc.Telephone numbers and call carriage for Cole's phone numbersUnited StatesView
    ElevenLabs, Inc.Cole's spoken voice on calls and in voice notesUnited StatesView
    Deepgram, Inc.Transcribing voice notes and audio you send to ColeUnited StatesView
    Google LLC (Maps Platform)Turning a location pin you share into an address, and finding places near youUnited StatesView
    1Password (AgileBits Inc.)Reading logins from a 1Password vault you chose to share, using a token you provideCanadaView

    3. Change Notification Process

    Summary

    We notify you at least 30 days before adding or replacing a sub-processor, giving you time to review and object.

    When we plan to add or replace a sub-processor, we follow this process:

    1. We update this page with the proposed change and the effective date.
    2. We send an email notification to the account owner of each customer with an active Data Processing Agreement at least 30 days before the change takes effect.
    3. Customers have 30 days from the notification date to raise an objection by emailing privacy@pocodot.ai.
    4. If no objection is received within the notice period, the change is deemed accepted.

    4. Objection Process

    Summary

    If you object to a new sub-processor, we'll work with you to find an alternative. If we can't resolve it, you may terminate the affected services.

    If you object to a new or replacement sub-processor on reasonable data protection grounds:

    1. Email your objection to privacy@pocodot.ai within the 30-day notice period, stating the specific grounds for your objection.
    2. We will discuss the objection with you in good faith and explore reasonable alternatives (e.g., using a different sub-processor, additional contractual or technical safeguards).
    3. If we cannot reach a mutually acceptable resolution within 30 days, you may terminate the services that require the use of the objected-to sub-processor without penalty.

    This right of termination is your sole and exclusive remedy with respect to sub-processor objections.

    Questions about this policy? Email us at privacy@pocodot.ai