Sub-processor list
Last updated and effective as of 23 October 2026 (version 2026-10-23-en). Privacy Policy · Deutsche Datenschutzerklärung
Perdure is operated by Brox AI, Inc. ("Brox"). To run the panel we rely on a small set of trusted third-party service providers ("sub-processors") that process personal data on our behalf, under contract (Art. 28 GDPR where applicable). This page lists them, what each does for us, and the categories of personal data each one processes. It is the public version of the recipients section referenced in our Privacy Policy and German Datenschutzerklärung.
We do not sell your personal information. Research clients only ever receive anonymised, aggregated insights — never your name, contact details, raw recordings, or anything reasonably capable of identifying you.
One provider on our website is not a sub-processor and is therefore not in the tables below: Meta Platforms, which receives website-visit data through the optional, consent-based ad-measurement pixel described in our Privacy Policy (Section 11) and Datenschutzerklärung (Abschnitt 12). Meta processes that data under its own responsibility (jointly with us for the collection), never receives member account, profile or conversation data through the pixel, and only runs at all if you allow it (US visitors: on by default with Meta Limited Data Use, with an opt-out). Separately, Meta Platforms is a sub-processor for the automated review of hello videos, listed in the table below.
The three AI services that run and analyse members' conversations (ElevenLabs, Anthropic and Meta's AI video model) are described in more detail, with every use and how we ask a member's permission in the app before anything is sent to them, in Section 4b of our Privacy Policy and Abschnitt 7a der Datenschutzerklärung.
1. Primary sub-processors (member data)
These providers process identifiable member personal data.
| Provider | Role | Personal data processed | Region & notes |
|---|---|---|---|
| Supabase | Database, authentication, and file storage | Account and profile data, voice transcripts, survey responses, hello-videos, consent and fraud records — effectively all member data at rest | US |
| Fly.io | Backend application hosting | All data in transit while our API processes a request | US |
| Vercel | Frontend (website/app) hosting | Client-side rendering only; no persistent store of member data | US |
| ElevenLabs, Inc. | Conversational AI for every voice and text conversation (speech-to-text, language model, text-to-speech) | Voice audio, text typed in a conversation or chat, the resulting transcripts, and the member's first name, profile details and a summary of earlier conversations (so a conversation can follow on) | US |
| Anthropic, PBC (Claude) | AI text analysis: guiding conversations; building your digital twin, profile, memory, insights and enrichment; suggesting topics and pulses; answering questions asked in the app; Picks recommendations; checking answers are genuine; helping our team read and answer support messages | Transcripts, pulse answers, first name and profile details, the summary of earlier conversations, and, where those features are used, questions asked in the app, Picks ratings and taste-quiz answers, Brox Panel answers a member brings over, and support messages; (for comparative insights) anonymised peer cohorts | US |
| Tremendous | Cash payout processing | Name, reward email address, and payout amount | US. We use a Brox-shared Tremendous account with a dedicated Perdure campaign and funding; payout records and webhooks are segregated per app so member payout data is not commingled across Brox products |
| Resend | Transactional email delivery (and our authentication email relay) | Email address, display name, and the message content | US. The optional email-to-a-friend referral channel is disabled for members in the EU; service emails (participation, payouts, support) are still sent |
| Meta Platforms, Inc. (AI video model) | Automated review of hello videos (liveness, location consistency, spam and explicit-content checks) | Hello-video recordings and the member’s stated country | US |
| Firebase Cloud Messaging (FCM) | Mobile push notifications (members only) | Device push token and the notification text | US. Production only |
| IPQualityScore (IPQS) | IP-address reputation and geolocation checks for fraud prevention | IP address and derived geolocation | US. Disabled for EU/EEA members — EU members' IP addresses are never sent to IPQS. It is also off by default platform-wide |
| Twilio | Phone-number verification at sign-up: sending the one-time SMS code (Twilio Verify) and checking the number's country, line type and network (Twilio Lookup) | The mobile phone number, its country, line type and network, and the code sent to it | US. Used only at sign-up, never at login, and only for applicants who are asked to confirm a number; nothing is retroactive, so existing members are not asked |
| Cloudflare (Turnstile) | Bot/abuse protection (CAPTCHA) on web sign-up and login | A short-lived challenge token | US. Currently inactive; the verification path is retained |
| Google (Calendar & Drive) | Live-interview scheduling, Meet links, and transcript retrieval | Attendee email addresses, event metadata, and interview transcript documents | US. Limited to live (human-conducted) interviews |
| Stripe Identity | Government-ID verification for higher-value payout tiers | ID document and selfie are held by Stripe; Perdure stores only a verification session reference | US. Not yet live (planned feature) |
2. Secondary sub-processors (no member personal data)
These support operations and analytics and do not receive identifiable member data.
| Provider | Role | Data processed | Region & notes |
|---|---|---|---|
| Plausible | Privacy-friendly website analytics (admin only) | Aggregate, cookieless statistics — no member personal data | EU-hosted analytics |
| Sentry | Application error tracking | Error traces with personal data redacted | US. Currently inactive in production |
| Upstash | Internal cost/usage metrics (admin only) | Operational metrics — no member personal data | US |
3. International transfers and safeguards
All of our sub-processors are US-based, so personal data of members in the EU/EEA (and the UK) is transferred to the United States. These transfers are protected by recognised safeguards:
- the EU–US Data Privacy Framework where the recipient is certified, and/or
- the European Commission's Standard Contractual Clauses (SCCs), with additional measures as appropriate; the UK International Data Transfer Addendum (IDTA) for UK data.
A copy of the relevant safeguards is available on request at privacy@perdure.ai.
4. How we tell you about changes
This list is the single public source of truth for our sub-processors and is kept in step with our internal Record of Processing Activities and our Privacy Policy. When we add or replace a sub-processor that processes member personal data, we will:
- update this page and bump the version date at the top;
- publish the change in the next version of our Privacy Policy / Datenschutzerklärung; and
- email affected members in advance of any material change, so you have the opportunity to ask questions or object before it takes effect.
To request the current list in another format, or to raise a question or objection, contact our privacy team at privacy@perdure.ai.