Legal
Last reviewed: 7 September 2026
David is a data processor acting on your instructions; you are the controller. The parties below are the sub-processors Ergonomy Limited engages to provide the Service. This list is referenced by our Privacy Policy and Data Processing Agreement, and the technical detail (what an AI model sees, retention, residency) sits on our data-residency page.
Your administrators choose in David's settings whether AI model requests stay in the UK, stay in the EU, or may use all providers. Each vendor below is marked with how it is engaged for your organisation:
To keep AI model requests inside the UK or EU, use the region setting in David; to enable or remove a model provider, use the Models page. To exclude a supporting vendor, email legal@meetdavid.ai (see clause 5 of the Data Processing Agreement).
Which of these providers is engaged follows two choices your administrators make in David’s settings: the AI processing region, and which models users may run (the Models page). A provider whose models are not enabled is not engaged for model requests. The standard configuration enables models from the providers marked accordingly below. Credentials and integration secrets are never sent to a model provider.
| Sub-processor | Purpose | Engagement | Data location | Entity & jurisdiction |
|---|---|---|---|---|
| Amazon Web Services (AWS Bedrock) | Claude and open-weight model inference run through AWS | Admin-enabled In the standard configuration. | Region-pinnable: UK (London), EU, or US | Amazon Web Services, Inc. (US; UK and EU regions available) |
| Google (Vertex AI) | Gemini model inference | Admin-enabled In the standard configuration. | Region-pinnable; EU broadly, London (UK) for a limited set | Google LLC (US) |
| Anthropic | Claude model inference (first-party API) | Admin-enabled In the standard configuration. | US; EEA/UK contracting via Anthropic Ireland Ltd | Anthropic PBC (US) / Anthropic Ireland Ltd (EEA/UK) |
| OpenAI | GPT model inference (business/API tier) and text-to-speech for spoken replies | Admin-enabled In the standard configuration. | US default; EU residency for supported endpoints | OpenAI, L.L.C. (US) / OpenAI Ireland Ltd (EEA) |
| Groq | Fast inference of open-weight models | Admin-enabled In the standard configuration. | US | Groq, LLC (US) |
| Fireworks AI | Inference of open-weight models | Admin-enabled In the standard configuration. | US (EU via enterprise dedicated deployments) | Fireworks.ai, Inc. (US, Delaware) |
| Meta Platforms | Muse Spark model inference (standard tier only, which does not train on prompts) | Admin-enabled Not in the standard configuration; enabled only by your administrators. | US | Meta Platforms, Inc. (US) |
| xAI | Grok model inference (developer API) | Admin-enabled Not in the standard configuration; enabled only by your administrators. | US default; EU endpoint by agreement | xAI (US) |
Engaged for search and retrieval, for specific features (meeting transcription, dictation), and for service observability. Feature-gated rows receive data only while you use that feature.
| Sub-processor | Purpose | Engagement | Data location | Entity & jurisdiction |
|---|---|---|---|---|
| Voyage AI | Text embeddings so David can search your conversations and knowledge | Default | US | Voyage AI, a MongoDB company (US) |
| Tavily | Web search on queries derived from your request | Default | US | AlphaAI Technologies Inc. d/b/a Tavily (US) |
| Exa | Web search and retrieval on queries derived from your request | Feature-gated Only where Exa is configured as the web-search provider for your organisation. | US | Exa (US) |
| Deepgram | Speech-to-text for recorded meetings | Feature-gated Only when you record a meeting with the desktop app. | US | Deepgram, Inc. (US) |
| Gladia | Speech-to-text for recorded multi-speaker meetings | Feature-gated Only when you record a meeting with the desktop app. | EU (France) | Gladia SAS (France) |
| AssemblyAI | Live dictation: audio streamed from your browser while you dictate a message | Feature-gated Only while you use dictation in the message box. | US | AssemblyAI, Inc. (US) |
| Langfuse | Observability and tracing of AI requests, used for reliability and support investigation; traces include prompts and outputs | Default | EU (Ireland, AWS eu-west-1) | Langfuse (ClickHouse, Inc., US); EU data region |
Holds the authorised connection to a third-party tool on our behalf and relays requests to it. Most integrations run through our own self-hosted broker, which is not a third party.
| Sub-processor | Purpose | Engagement | Data location | Entity & jurisdiction |
|---|---|---|---|---|
| Composio | Integration broker for some connected tools: holds the authorised connection and relays requests to the tool | Feature-gated Only when you connect a tool through a Composio-backed integration. | US | Sampark, Inc. d/b/a Composio (US, Delaware) |
Compute, storage, and hosting that underpin the Service, and payment collection for paid plans.
| Sub-processor | Purpose | Engagement | Data location | Entity & jurisdiction |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Compute, object storage (KMS-encrypted), queuing, backups, hosting, and Polly text-to-speech where selected | Default | Per-tenant region (UK / EU / US) | Amazon Web Services, Inc. (US; UK and EU regions available) |
| Stripe | Payment collection (Direct Debit and card), mandates, invoices, and the billing contact details needed for them | Feature-gated Only when you take a paid plan or top up credits. | Contracting in Ireland; processing may occur in the US under SCCs and the UK Addendum | Stripe Payments Europe, Limited (Ireland) for UK and EEA customers |
| Google (Web Push / FCM) | Transport for encrypted browser notifications | Feature-gated Only when browser notifications are configured and you enable them. Your browser selects the transport. | Browser-selected service; no regional routing guarantee | Google LLC (US) |
| Mozilla (Autopush) | Transport for encrypted browser notifications | Feature-gated Only when browser notifications are configured and you enable them. Your browser selects the transport. | Browser-selected service; no regional routing guarantee | Mozilla Corporation (US) |
| Apple (APNs) | Transport for encrypted browser notifications | Feature-gated Only when browser notifications are configured and you enable them. Your browser selects the transport. | Browser-selected service; no regional routing guarantee | Apple Inc. (US) |
| Microsoft (WNS) | Transport for encrypted browser notifications | Feature-gated Only when browser notifications are configured and you enable them. Your browser selects the transport. | Browser-selected service; no regional routing guarantee | Microsoft Corporation (US) |
For the avoidance of doubt, these are not sub-processors of Ergonomy:
7 September 2026
Named the feature and platform vendors previously described only by category (Deepgram, Gladia, AssemblyAI, Voyage AI, Tavily, Exa, Composio, Langfuse). Added Stripe (billing) and the model providers Meta Platforms and xAI, which the standard configuration does not enable. Removed Nango: it now runs on our own infrastructure, so it is no longer a third party. Marked every vendor as admin-enabled, default, or feature-gated.
9 July 2026
First published list.
We may update this list as we add, remove, or reconfigure sub-processors. Every change is recorded in the change log above. To be notified by email before a new sub-processor starts handling your data, write to hello@meetdavid.ai. You may object on reasonable data-protection grounds within 30 days of a notice, as set out in the Data Processing Agreement.