Service providers
Thalovant Subprocessors
The companies that process personal information for Thalovant, what they do, and where.
Current subprocessors
| Subprocessor | What it does for us | Personal information involved | Location | Transfer safeguard |
|---|---|---|---|---|
| Cloudflare, Inc. | Edge network, DNS, DDoS and bot protection, TLS termination, and email routing for our thalovant.com addresses | IP addresses and request metadata of traffic passing through the edge; email messages sent to our addresses while they are routed | United States, with a global edge network | EU-U.S. Data Privacy Framework certification and Standard Contractual Clauses |
| Stripe, Inc. and its affiliates | Payment processing, subscription billing, tax calculation, fraud prevention; merchant of record for the sale when enabled | Name, email, billing address, payment method details, purchase history | United States, Canada, Ireland and other locations used by Stripe | EU-U.S. Data Privacy Framework certification and Standard Contractual Clauses |
| Google LLC (Google Analytics) | Website analytics on thalovant.com, only after you consent | Pages viewed, device and browser information, approximate location derived from IP address, cookie identifiers | United States | EU-U.S. Data Privacy Framework certification and Standard Contractual Clauses |
| GitHub, Inc. | Hosting and distribution of our software downloads (Thalovant Voice desktop app and satellite software) | IP address and request metadata when you download software | United States | EU-U.S. Data Privacy Framework certification and Standard Contractual Clauses |
When Stripe acts as merchant of record, it processes payment information as an independent controller for the sale, not as our subprocessor.
What is not on this list
Thalovant runs hubs, speech recognition, speech synthesis, AI models, memory and utterance storage on hardware it operates in Montreal, Quebec, Canada. That processing is performed by Thalovant itself and is not subcontracted.
Changes
We update this page at least 30 days before a new subprocessor starts processing personal information. Work customers who want an email when this page changes can ask at privacy@thalovant.com. Customers may object as described in section 6 of the DPA.
Version 2026-10-01. English is the default language of these documents. Version française (draft translation). Questions: support@thalovant.com.