Legal
Sub-processors
Last updated: October 13, 2026
Assistly is operated by Zigzag Technologies. To run the service we rely on the third-party providers below, each under a written agreement that limits what they may do with the data. None of them is permitted to use customer data to train AI models, and none receives it for advertising.
When we add or replace a provider, we update this page first and change the date at the top. To be told by email, send a note to support@tryassistly.com asking to subscribe to sub-processor updates. Business customers can object to a change under our Data Processing Addendum.
Amazon Web Services
Purpose. Hosting for the Assistly API and background jobs (ECS), file storage (S3), logs (CloudWatch), and secrets (Systems Manager).
Data processed. All application traffic and processing; stored screenshots and uploaded files; server logs, kept 30 days.
Location. United States (us-east-1)
Amazon Bedrock (AI models)
Purpose. Runs the AI models that generate answers, recaps, and summaries: Anthropic Claude, Amazon Nova, Moonshot Kimi, Alibaba Qwen, and Cohere for text embeddings, all hosted by Amazon Bedrock.
Data processed. Transcript excerpts, screenshots, retrieved notes, and Slack excerpts needed for the answer. Bedrock does not retain this content or make it available to model providers, and it is not used for training.
Location. United States
Supabase
Purpose. Primary database hosting (PostgreSQL), on AWS.
Data processed. Account details, sessions, transcripts, recaps, action items, integration tokens, indexed Slack channel content.
Location. United States (us-east-2)
Soniox
Purpose. Speech-to-text transcription of live and uploaded audio.
Data processed. Audio streams and the resulting text. Audio is not retained after transcription.
Location. United States
OpenRouter
Purpose. Optional alternative route to AI models (OpenAI models). Used only when this route is enabled.
Data processed. The same request content that would otherwise go to Amazon Bedrock. Not used for training.
Location. United States
Tavily
Purpose. Web search, so answers can cover recent public information.
Data processed. Search queries derived from your question. No transcripts or account details.
Location. United States
Stripe
Purpose. Payments and subscription billing on the web and desktop.
Data processed. Billing name, email, and payment details. Card numbers are held by Stripe only.
Location. United States
Apple
Purpose. Sign in with Apple, and subscriptions bought in the App Store.
Data processed. Name, email or relay address, an account ID, and purchase status.
Location. United States
Purpose. Sign-in with Google, the optional read-only Google Calendar connection, and subscriptions bought through Google Play.
Data processed. Basic profile (name, email), calendar events if connected, and purchase status.
Location. United States
Slack
Purpose. The optional Slack integration.
Data processed. Recaps and answers the bot posts; messages from channels the bot is added to; questions asked to the bot.
Location. United States
PostHog
Purpose. Product analytics, feature flags, session recordings, and error tracking. On the website and web app, analytics and recordings run unless you switch them off.
Data processed. Usage events, device information, masked session recordings, and server error reports. No transcript or message content.
Location. United States
Sentry
Purpose. Crash and error reports from the desktop app and Assistly Solo.
Data processed. Error messages, stack traces, app version, device and OS details, and IP address. No transcript, answer, or screen content; license and API keys are masked.
Location. United States
Resend
Purpose. Email: sign-in, receipts, account notices, and product tips.
Data processed. Email address, the content of those emails, and whether they were opened.
Location. United States
Zoho Desk
Purpose. Support ticketing for issues reported from the app or by email.
Data processed. Your name, email, the report you wrote, and app diagnostics you chose to send.
Location. Canada
Google Workspace
Purpose. Email correspondence with the Assistly team.
Data processed. The emails you send us and our replies.
Location. United States
How to raise a concern
If you object to a provider on this list, email support@tryassistly.com. Our Privacy Policy describes what we collect, how long we keep it, and how transfers outside the EU and UK are protected.