Last updated 2026-07-19
xRepengages the third-party providers below to operate the service. Each may process customer data on our behalf, under contract, only as needed to deliver their function. This page supports the data processing agreement (DPA) required under the GDPR, the India DPDP Act, and comparable regimes. Providers marked “if enabled” process data only when the corresponding feature is turned on for your workspace.
| Subprocessor | Purpose | Data region |
|---|---|---|
| Anthropic | AI model provider (Claude) powering the conversational agent | USA |
| Tavus | AI video avatar generation for the live rep | USA |
| Daily | Real-time audio/video transport for voice and video sessions | USA |
| Cloudflare | Edge network, CDN, DNS, and bot / DDoS protection | Global edge (USA-headquartered) |
| Vercel | Application hosting and serverless compute | USA (global edge) |
| Neon | Managed PostgreSQL database for application and tenant data | USA / EU (per project region) |
| OpenReplayif enabled | Session replay and product analytics | USA / EU |
| IPinfoif enabled | IP geolocation and enrichment | USA |
| Resend | Transactional email delivery (notifications, verification) | USA |
| Stripe | Subscription billing and payment processing | USA (global) |
We may add or replace subprocessors as the service evolves. Material changes are reflected here with an updated effective date. Customers with a signed DPA that includes a notification clause will be notified in line with that agreement and may raise a reasonable objection.
Questions about our subprocessors or DPA? Contact support@xrepai.com.