Sub-processors
Third-party services that process data on behalf of QualityOS. We maintain data processing agreements with each and conduct annual reviews.
Last reviewed: April 2026
Groq, Inc.
United StatesAI inference — transcript analysis and audio transcription (Whisper)
Transcripts sent for inference only. Groq does not use customer data to train models.
Supabase, Inc.
United StatesDatabase (PostgreSQL) and file storage for scorecards and KB documents
Data encrypted at rest with AES-256. Backups retained for 7 days.
Clerk, Inc.
United StatesAuthentication, user identity, and session management
Passwords and OAuth tokens are never stored by QualityOS. Clerk handles all credential management.
Vercel, Inc.
United StatesFrontend hosting and edge delivery (Next.js)
No user data persisted at edge nodes. Request logs retained for 30 days.
Railway Corp.
United StatesBackend API hosting (FastAPI)
Application logs do not include transcript content.
Cloudflare, Inc.
United StatesDNS, DDoS protection, and domain registrar
Traffic metadata only. No access to payload content.
Dodo Payments
United StatesPayment processing and subscription management
QualityOS never stores card numbers or billing credentials.
Enterprise customers can request the full sub-processor list with DPA references. Email security@getqualityos.com.