Sub-processor list
Last updated and effective as of 19 June 2026 (version 2026-06-19-en). Privacy Policy · Deutsche Datenschutzerklärung
Perdure is operated by Brox AI, Inc. ("Brox"). To run the panel we rely on a small set of trusted third-party service providers ("sub-processors") that process personal data on our behalf, under contract (Art. 28 GDPR where applicable). This page lists them, what each does for us, and the categories of personal data each one processes. It is the public version of the recipients section referenced in our Privacy Policy and German Datenschutzerklärung.
We do not sell your personal information. Research clients only ever receive anonymised, aggregated insights — never your name, contact details, raw recordings, or anything reasonably capable of identifying you.
One provider on our website is not a sub-processor and is therefore not in the tables below: Meta Platforms, which receives website-visit data through the optional, consent-based ad-measurement pixel described in our Privacy Policy (Section 11) and Datenschutzerklärung (Abschnitt 12). Meta processes that data under its own responsibility (jointly with us for the collection), never receives member account, profile or conversation data, and only runs at all if you allow it (US visitors: on by default with Meta Limited Data Use, with an opt-out).
1. Primary sub-processors (member data)
These providers process identifiable member personal data.
| Provider | Role | Personal data processed | Region & notes |
|---|---|---|---|
| Supabase | Database, authentication, and file storage | Account and profile data, voice transcripts, survey responses, hello-videos, consent and fraud records — effectively all member data at rest | US |
| Fly.io | Backend application hosting | All data in transit while our API processes a request | US |
| Vercel | Frontend (website/app) hosting | Client-side rendering only; no persistent store of member data | US |
| ElevenLabs | Conversational AI voice (speech-to-text, language model, text-to-speech) | Voice audio and the resulting transcripts | US |
| Anthropic (Claude) | AI text analysis — building your digital twin, profile, memory, insights, and enrichment | Transcripts, profile text, and (for comparative insights) anonymised peer cohorts | US |
| Tremendous | Cash payout processing | Name, reward email address, and payout amount | US. We use a Brox-shared Tremendous account with a dedicated Perdure campaign and funding; payout records and webhooks are segregated per app so member payout data is not commingled across Brox products |
| Resend | Transactional email delivery (and our authentication email relay) | Email address, display name, and the message content | US. The optional email-to-a-friend referral channel is disabled for members in the EU; service emails (participation, payouts, support) are still sent |
| Firebase Cloud Messaging (FCM) | Mobile push notifications (members only) | Device push token and the notification text | US. Production only |
| IPQualityScore (IPQS) | IP-address reputation and geolocation checks for fraud prevention | IP address and derived geolocation | US. Disabled for EU/EEA members — EU members' IP addresses are never sent to IPQS. It is also off by default platform-wide |
| Cloudflare (Turnstile) | Bot/abuse protection (CAPTCHA) on web sign-up and login | A short-lived challenge token | US. Currently inactive; the verification path is retained |
| Google (Calendar & Drive) | Live-interview scheduling, Meet links, and transcript retrieval | Attendee email addresses, event metadata, and interview transcript documents | US. Limited to live (human-conducted) interviews |
| Stripe Identity | Government-ID verification for higher-value payout tiers | ID document and selfie are held by Stripe; Perdure stores only a verification session reference | US. Not yet live (planned feature) |
2. Secondary sub-processors (no member personal data)
These support operations and analytics and do not receive identifiable member data.
| Provider | Role | Data processed | Region & notes |
|---|---|---|---|
| Plausible | Privacy-friendly website analytics (admin only) | Aggregate, cookieless statistics — no member personal data | EU-hosted analytics |
| Sentry | Application error tracking | Error traces with personal data redacted | US. Currently inactive in production |
| Upstash | Internal cost/usage metrics (admin only) | Operational metrics — no member personal data | US |
3. International transfers and safeguards
All of our sub-processors are US-based, so personal data of members in the EU/EEA (and the UK) is transferred to the United States. These transfers are protected by recognised safeguards:
- the EU–US Data Privacy Framework where the recipient is certified, and/or
- the European Commission's Standard Contractual Clauses (SCCs), with additional measures as appropriate; the UK International Data Transfer Addendum (IDTA) for UK data.
A copy of the relevant safeguards is available on request at privacy@perdure.ai.
4. How we tell you about changes
This list is the single public source of truth for our sub-processors and is kept in step with our internal Record of Processing Activities and our Privacy Policy. When we add or replace a sub-processor that processes member personal data, we will:
- update this page and bump the version date at the top;
- publish the change in the next version of our Privacy Policy / Datenschutzerklärung; and
- email affected members in advance of any material change, so you have the opportunity to ask questions or object before it takes effect.
To request the current list in another format, or to raise a question or objection, contact our privacy team at privacy@perdure.ai.