Subprocessors List

Last Updated: 30 November 2025

This page lists all third-party subprocessors that Keido Labs Ltd uses to provide the EmpathyC service. These subprocessors may access or process customer data as part of providing the Service.

We are committed to transparency about our data processing practices and comply with GDPR Article 28 requirements.


What is a Subprocessor?

A subprocessor is a third-party service provider that processes personal data on behalf of EmpathyC. When you use EmpathyC, your data may be processed by these entities to deliver core service functionality.


Current Subprocessors

Infrastructure and Hosting

Amazon Web Services (AWS)

  • Purpose: Cloud infrastructure, compute, storage, and networking
  • Data Location: EU (Ireland region - eu-west-1)
  • Data Processed: All customer data, conversation data, analytics
  • Website: aws.amazon.com
  • Safeguards: SOC 2 Type II, ISO 27001, GDPR-compliant Data Processing Agreement

Vercel Inc.

  • Purpose: Frontend hosting and content delivery
  • Data Location: Global CDN (primary: US)
  • Data Processed: Dashboard interface, session data, authentication tokens
  • Website: vercel.com
  • Safeguards: SOC 2 Type II, EU Standard Contractual Clauses

AI Analysis Providers

OpenAI, L.L.C.

  • Purpose: Conversation quality analysis using GPT models
  • Data Location: US
  • Data Processed: Customer conversation text for empathy and quality scoring
  • Website: openai.com
  • Safeguards: API Terms of Service with zero data retention policy (data not used to train OpenAI models)

Anthropic PBC

  • Purpose: Conversation quality analysis using Claude models
  • Data Location: US
  • Data Processed: Customer conversation text for empathy and quality scoring
  • Website: anthropic.com
  • Safeguards: API Terms of Service with zero data retention policy (data not used to train Anthropic models)

Google LLC (Gemini API)

  • Purpose: Conversation quality analysis using Gemini models
  • Data Location: US
  • Data Processed: Customer conversation text for empathy and quality scoring
  • Website: ai.google.dev
  • Safeguards: API Terms of Service with zero data retention policy (data not used to train Google models)

Payment Processing

Stripe, Inc.

  • Purpose: Payment processing, subscription billing, and payment method storage
  • Data Location: US and EU
  • Data Processed: Billing information, payment methods, transaction data
  • Website: stripe.com
  • Safeguards: PCI DSS Level 1 certified, SOC 2 Type II, GDPR-compliant Data Processing Agreement

Communication and Email

Resend, Inc.

  • Purpose: Transactional email delivery (account notifications, billing alerts, support communications)
  • Data Location: US
  • Data Processed: Email addresses, account-related communications
  • Website: resend.com
  • Safeguards: SOC 2 Type II, EU Standard Contractual Clauses

Intercom, Inc.

  • Purpose: Customer support and messaging platform (for EmpathyC customer support inquiries)
  • Data Location: US
  • Data Processed: Support conversations, customer names, email addresses, account information
  • Website: intercom.com
  • Safeguards: SOC 2 Type II, ISO 27001, GDPR-compliant Data Processing Agreement

Data Protection Measures

All subprocessors are required to:

  • Implement appropriate technical and organizational security measures
  • Process data only as instructed by Keido Labs
  • Maintain confidentiality of customer data
  • Comply with GDPR, UK GDPR, and other applicable data protection laws
  • Execute Data Processing Agreements with EU Standard Contractual Clauses or equivalent safeguards

Changes to Subprocessors

Adding or Changing Subprocessors

We may add, remove, or replace subprocessors as necessary to improve or maintain the Service. When we make changes:

For new subprocessors:

  • We will update this page at least 30 days before the new subprocessor begins processing data
  • Enterprise customers will receive email notification
  • You may object to the new subprocessor within 30 days by contacting hello@keidolabs.com

Your rights if you object:

  • We will work with you to find an alternative solution
  • If no alternative is feasible, you may terminate your subscription with a pro-rated refund

Notification of Changes

To receive notifications when this list changes:

  • Subscribe to updates by emailing hello@keidolabs.com with subject "Subprocessor Notifications"
  • Enterprise customers are automatically notified of changes
  • Check this page regularly (we recommend monthly reviews)

Additional Information

For more information about how we process data:


Contact Us

Questions about our subprocessors or data processing practices?

Keido Labs Ltd

  • Email: hello@keidolabs.com
  • Address: 31 Russell Street, Liverpool, England, L3 5LJ
  • Company Number: 16805440

Version History:

  • 30 November 2025: Initial publication