Sub-processors
These are the companies that process data on Docent’s behalf today. The list is checked against the same configuration the servers run: a test fails if the two disagree. Audio is never stored by Docent. Telnyx’s conversation retention and call recording are switched off; OpenAI processes audio under its API data-use terms.
| Vendor | What it handles | Where |
|---|---|---|
| Cloudflare | Runs our servers (Workers), stores knowledge files (R2), caches per-app configuration (KV), pools database connections (Hyperdrive), computes the embeddings used to search your knowledge (Workers AI, model @cf/baai/bge-base-en-v1.5), and sends notification email for Docent (Email Service) from notifications@usedocent.com. | Global edge network; storage jurisdiction is configurable per account. |
| Neon | Hosts the Postgres database that is the system of record (workspaces, apps, keys, goals, knowledge metadata, masked turns, analytics events) and the Console sign-in service. | United States, us-east-1. |
| Telnyx | Runs the language model that composes the guide’s replies (Telnyx Inference), and is the alternate voice vendor. Conversation retention and call recording are switched off. | United States. Processing location is best-effort; storage residency is an account setting. |
| OpenAI | Runs the voice session (speech recognition, turn-taking and speech synthesis) when the guide is used by voice. This is the production default voice vendor. | United States. |
| TypeSafe | Checks that what the guide is about to say is supported by the knowledge it was given, before the words reach you, and works out which control on the page you meant when you ask to be shown or taken somewhere. Receives the sentence being checked, the passages it is checked against, and a list of the controls on your current page as their roles and visible labels, all already masked. Receives no field values, no identity and no audio, and its answers are labels and numbers, not text we repeat. | United States. |
| Polar | Billing: the checkout, the card details (held by Polar, never by Docent), subscriptions, invoices and tax as the seller of record. Receives the workspace id and the count of guided sessions. | Per Polar’s terms; card processing on Polar’s own payment providers. |