Sub-processors

Last updated: February 16, 2026


Overview

Nova Carpathians Creations S.R.L. ("we", "us") engages the following third-party sub-processors to provide the Selio AI service. Each sub-processor is bound by data protection obligations consistent with our Data Processing Agreement (DPA) and applicable data protection law, including GDPR.

We will notify customers at least 30 days before engaging a new sub-processor or making material changes to an existing sub-processor relationship. Notifications are sent via email to the account administrator.


Current Sub-processors

Infrastructure & Data Storage

Sub-processorPurposeData processedLocation of processingTransfer mechanism
Supabase Inc.Database hosting (PostgreSQL), user authentication, file storage, serverless edge functions, real-time subscriptionsAll application data: user accounts, call transcriptions, AI insights, documents, metrics, team dataEU (Frankfurt, eu-central-1) — AWS infrastructureData remains in EU; DPA in place
Amazon Web Services (AWS)Cloud infrastructure provider (via Supabase)All data stored in SupabaseEU (Frankfurt, eu-central-1)Data remains in EU; AWS DPA

AI & Machine Learning

Sub-processorPurposeData processedLocation of processingTransfer mechanism
OpenAI, L.L.C.AI coaching insights, call summarization, follow-up email generation, speaker diarization (gpt-4o-mini, gpt-4o-transcribe-diarize)Call transcription fragments (for live insights), full audio recordings (for post-call diarization), analysis promptsUSAStandard Contractual Clauses (SCC)
Google LLC (Gemini API)Vector embeddings for document search, RAG query responses, File Search API (gemini-2.5-flash, text-embedding-004)Document text content, search queries, uploaded files for indexingUSA / Global (Google Cloud)Standard Contractual Clauses (SCC)

Speech-to-Text

Sub-processorPurposeData processedLocation of processingTransfer mechanism
ElevenLabs Inc.Real-time speech-to-text transcription (Scribe V2 via WebSocket)Live audio stream (PCM 16kHz mono, Base64-encoded)USAStandard Contractual Clauses (SCC)
Deepgram Inc.Alternative speech recognition and speaker diarization (backup provider, not active by default)Audio data (only when activated as alternative provider)USAStandard Contractual Clauses (SCC)

Email Integration

Sub-processorPurposeData processedLocation of processingTransfer mechanism
Google LLC (Gmail API)Sending follow-up emails, creating email drafts on behalf of users who have connected their Gmail accountEmail content (subject, body, recipients), user email addressUSA / Global (Google Cloud)Standard Contractual Clauses (SCC); user-initiated OAuth consent

Important Notes

No AI model training

None of our sub-processors use Customer Data for the purpose of training or improving their AI models. All AI processing is performed through stateless API calls, and customer data is not retained by the sub-processor beyond the time necessary to complete the request.

Data minimization

We send only the minimum data necessary for each sub-processor to perform its function. For example, live coaching insights are generated from transcription fragments (not full call recordings), and document embeddings are generated from text chunks (not entire documents at once).

Encryption

All data transmitted to sub-processors is encrypted in transit using TLS 1.2 or higher. Sensitive credentials (such as Gmail OAuth tokens) are encrypted at rest using AES-256-GCM before storage.


Change Notifications

To receive advance notifications of sub-processor changes, ensure that the email address associated with your organization administrator account is current. We provide at least 30 days' notice before engaging a new sub-processor.

If you have objections to a new sub-processor, please contact us within 15 days of notification at contact@greenlead.ro.


Contact

For questions about our sub-processors or data processing practices:


This page is updated whenever sub-processor relationships change.

Cookie and Analytics Preferences

We use essential cookies for core functionality and optional analytics to improve product and conversion performance.

Privacy & Cookies