Providers & Data Processing
Version 2026-09-17-beta-1 · Effective 2026-09-17
Support and privacy: support@agendity.com
September 19 update: optional public-page analytics is available only with your permission. The analytics notice and privacy choices update the earlier analytics inventory below.
This informational inventory distinguishes the new platform’s active foundation from planned production services and the separate character Lab. It is not a contractual subprocessor register or a data processing agreement. A provider is not involved in every request merely because it appears here.
Current platform foundation
- Neon: saved briefs, account/session records, workspace messages and database operation records. The isolated development database is in AWS US East (Northern Virginia).
- Google: optional sign-in. Google handles its sign-in page and returns the authorized account identity; this is not access to your Google inbox.
- Resend: configured email sign-in delivery and the beta invitation/approval notification adapter. Recipient addresses, message content and (for sign-in only) short-lived sign-in links are sent when that route is enabled. Actual inbox delivery and hosted invitation sending must be verified separately; provider acceptance alone is not an inbox receipt.
- Better Auth: self-hosted authentication software, not a separate hosted identity processor in this configuration.
Existing character runtime and planned hosted routes
- OpenAI: prompt interpretation, image generation, coding-agent character authoring and visual review in the explicitly enabled staging pipeline. Speech and live conversation are supported in the separate character runtime, not yet enabled as hosted customer features.
- ElevenLabs: supported voice route in the existing runtime; hosted platform access is not enabled yet. Stock-voice selection is not custom voice cloning.
- Google Cloud: supported speech route in the existing runtime; hosted identity and deployment configuration remain pending.
- Trigger.dev: deployed isolated staging workers for durable image and character-authoring jobs, checkpoints and outbox recovery. Production promotion and customer-facing release remain gated.
- Amazon Web Services S3: private staging storage for generated images and authoring checkpoints in US East (Northern Virginia). Public access is blocked and access is account-scoped through the server. Production bucket, access policies and retention still require verification before launch.
- Vercel: website/API hosting on a protected staging deployment. Unrestricted public production and the customer domain are not enabled.
- Stripe: intended subscription, invoice and payment processing. Billing is not active in this platform foundation.
Customer-selected services
Your own chatbot, speech provider, audio transport, tools and website hosting may process data under your contracts. Agendity must clearly show which route is active and which data leaves its service. Enabling a new integration requires appropriate authorization, not a blanket permission to send all workspace data to every vendor.
Before this becomes a contractual register
Confirm each provider’s contracting entity, purpose, categories of personal data, processing locations, retention, training settings, transfer mechanism and relevant contract. Complete the customer data processing agreement and its subprocessor change/objection procedure where required. No SOC 2, zero-retention, residency or training claim is implied by this list.
All legal documents →