Sub-Processors
Emily Politics: Sinatra AI Ltd
Last updated: 11 September 2026 (previous revision 24 March 2026)
Sinatra AI Ltd (“we”, “us”) uses the following third-party sub-processors to deliver the Emily Politics service. Each sub-processor is bound by a Data Processing Agreement (DPA) and processes data only as instructed by us and for the purposes described below.
We will update this list when sub-processors change and notify affected customers of material changes in accordance with our Privacy Policy.
Current Sub-Processors
| Sub-Processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Supabase Inc. | Database hosting, authentication, user management | Account data, conversations, engagements, documents, stakeholder records | EU |
| Vercel Inc. | Web application hosting, serverless functions, cron jobs | HTTP request logs, IP addresses (transient) | EU (London) |
| Google LLC (Gemini API) | AI language model for chat orchestration and briefings | User prompts, parliamentary context data (not used for model training per Google API ToS) | EU/US |
| Anthropic PBC (Claude API) | AI language model for document drafting (briefings, talking points, memos) | User prompts, parliamentary context data (not used for model training per Anthropic Commercial Terms) | US (EU-US DPF) |
| Voyage AI | Text embeddings for semantic search over parliamentary data | Search query text, parliamentary context data (public data only. No personal user data) | US (SCCs) |
| Cohere Inc. | Search-result reranking (cross-encoder relevance scoring) | Search query text (public parliamentary data only. No personal user data) | US/Canada (SCCs) |
| Stripe Inc. | Payment processing, subscription management | Payment card details (tokenised: we never see full card numbers), billing address, transaction history | EU/US (PCI-DSS Level 1) |
| Resend Inc. | Transactional email delivery (welcome, briefings, alerts, billing notifications) and open tracking | Email address, email content, delivery and open events | EU |
| Inngest Inc. | Background job orchestration (daily briefings, alerts, onboarding & trial emails) | User ID, email address, job scheduling metadata | US (SCCs) |
| Sentry (Functional Software Inc.) | Error tracking and application monitoring | Error stack traces, browser metadata, IP address (anonymised) | EU |
| PostHog Inc. | Product analytics (cookie-consent gated) | Pseudonymised usage events, page views (only with user consent) | EU (Frankfurt) |
| Upstash, Inc. | Rate limiting on sign-in, the API and the public pages (Redis counters) | Short-lived request counters keyed on a user ID or IP address. No message content. | Region as configured on our Upstash database, to be confirmed on publication |
| Fly.io, Inc. | Runs the live transcription worker that turns the public parliamentlive.tv broadcast into a live transcript while a House sits | Public parliamentary audio and the transcript text made from it. No customer personal data. | UK (London) |
| Google Cloud (Check Grounding and live transcription) | Two services with no regional endpoint yet: the Check Grounding scorer that tests whether an answer is supported by the sources retrieved for it, and Gemini live speech recognition for the parliamentary transcript | Check Grounding: the draft answer and the public source passages retrieved for that turn. Live transcription: public parliamentary audio only. | Google’s “global” multi-region location (documented exception, see below) |
| Meta Platforms Ireland Limited (WhatsApp Business Platform) | The WhatsApp channel, for subscribers who choose to link their number: carrying your messages to Emily and her replies, briefs and alerts back to your phone | Phone number, message content (text, voice notes, images and documents you send), message metadata, WhatsApp profile name | EU (Ireland). UK data localisation for data at rest to be recorded here once chosen at number registration. |
| Amazon Web Services | Hosting for Meta’s storage of WhatsApp Cloud API data at rest (messages and media in transit to you) when UK data localisation is chosen. Applies only to the WhatsApp channel. | The WhatsApp data listed above, at rest | UK (London), applies once UK data localisation is chosen |
Data Transfer Safeguards
Where sub-processors are located outside the UK/EU, we ensure appropriate safeguards are in place:
- UK adequacy decisions: for transfers to countries/territories recognised by the UK Government
- Standard Contractual Clauses (SCCs): incorporated into DPAs with US-based processors
- EU-US Data Privacy Framework: for certified US companies (Stripe, Google)
Documented exception: Google’s global location
Two Google Cloud services we use, the Check Grounding scorer and Gemini live transcription, are served only from Google’s “global” multi-region location, which has no UK or EU regional endpoint at the time of writing. That is an exception to our UK/EU hosting posture and we record it here rather than leave it implied. What reaches them is narrow: Check Grounding receives a draft answer and the public source passages retrieved for it, and live transcription receives the public parliamentary broadcast. Neither receives your account details, your stakeholder records or your documents. We will move to a UK or EU regional endpoint, and update this page, as soon as Google offers one for these services.
Changes to This List
We update this page when we add or remove sub-processors, and we notify customers by email of material changes.
Changes
- 23 October 2026: removed the previous cash live-ASR sub-processor. Live parliamentary transcription runs on Google Cloud Gemini Live only (A-16). Notice of this removal is effective on publication.
- 13 September 2026: the wording of this section changed. It previously set a fixed waiting period before a material change could take effect, and invited objections during it. That was self-imposed rather than required, and it is withdrawn. Notice of a material change is now effective when this page is updated, and we email customers about it. Nobody relied on the earlier wording: there were no customers while it stood.
- 11 September 2026: added Meta Platforms Ireland Limited (the WhatsApp channel), Amazon Web Services (Meta’s UK storage for that channel), Fly.io (the live parliamentary transcript worker), Upstash (rate limiting) and the Google Cloud global location used by Check Grounding and live transcription. Notice of these additions was effective on publication; there were no customers to notify.
- 24 March 2026: first published.
Questions about our sub-processors? Contact us at support@emilypolitics.com
See our Privacy Policy for how we handle your data.