Legal
Sub-processors
The third-party providers that help run Operator, what each one does, and the data it touches.
What a sub-processor is
A sub-processor is a third-party company we engage to help deliver the Operator service. We keep the list short and use established providers. Each one is engaged under data-protection terms no less protective than those in our Data Processing Addendum, and Operator remains responsible for their performance.
Current sub-processors
| Provider | What it does | Data it handles | Region |
|---|---|---|---|
| Supabase | Primary database, authentication, file storage, secrets vault | Account data, operational data, OAuth tokens (encrypted) | United States |
| Vercel | Web hosting and serverless functions | Request metadata, logs | United States (global edge) |
| Stripe | Subscription billing and metered usage | Billing contact, payment instruments (held by Stripe, not Operator) | United States |
| Resend | Transactional email | Recipient email address, message content | United States |
| Twilio | SMS and voice messaging | Recipient phone number, message content | United States |
| Retell AI | Voice agent runtime | Call audio and transcripts | United States |
| Anthropic | Language-model inference for agent work | Prompt content for the task being run; zero-retention terms used where available | United States |
| OpenAI | Language-model inference for agent work | Prompt content for the task being run; zero-retention terms used where available | United States |
Notices and objections
We will give reasonable advance notice of any new sub-processor that processes Personal Data, and customers under a DPA may object on reasonable data-protection grounds. To request notification, ask a question, or raise an objection, email operator@operator.fyi.
Contact
Sub-processor and privacy questions: operator@operator.fyi. Operator AI LLC, Wyoming, USA.