Last updated: 13 November 2026
To provide Wisdom Shift, The ASPIRE Group International, LLC, trading as WisdomShift, uses the third-party companies below. They may process personal information on our customers' behalf. Each is bound by written data protection terms at least as protective as our Data Processing Agreement (DPA).
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase, Inc. | Database, authentication and storage | All workspace data at rest | United States (West) |
| Render Services, Inc. | Application hosting | Data in transit and in application memory | United States |
| Cloudflare, Inc. | Content delivery, DNS, web application firewall | Request data, IP addresses | Global edge network |
| Deepgram, Inc. | Speech-to-text transcription | Session audio (not stored by Wisdom Shift) | United States |
| OpenAI, L.L.C. | AI language model processing | Session content and prompts sent for analysis | United States |
| Anthropic, PBC | AI language model processing | Session content and prompts sent for analysis | United States |
| Resend, Inc. | Transactional email delivery | Recipient name and email address, message content | United States |
| Stripe, Inc. | Payments and billing | Billing contact and payment details. Stripe also acts as an independent controller for its own regulatory purposes. | United States |
If a workspace uses its own AI provider keys, its content is processed by the provider it chooses, under its own agreement with that provider.
We give at least 30 days' notice before adding or replacing a sub-processor. Notice goes by email to workspace administrators and is posted on this page.
Customers may object on reasonable data protection grounds within 14 days of the notice, as set out in clause 6 of the DPA.
privacy@wisdomshift.app