1. OVERVIEW & DUE DILIGENCE
To deliver real-time, low-latency live speech transcription, translation, and neural voice synthesis, 7 ENTERPRISES, LLC (“Company”, “we”, or “us”) contracts with third-party infrastructure, artificial intelligence, and communications providers (“Subprocessors”).
Prior to engaging any subprocessor, Company conducts rigorous security, legal, and privacy reviews to ensure:
- Contractual Data Protection: The subprocessor is bound by written Data Processing Agreements incorporating the European Commission’s Standard Contractual Clauses (SCCs) where international transfers occur.
- Zero Model Training Guarantee: Enterprise commercial agreements prohibit the subprocessor from using customer audio streams, speech transcripts, or voice samples to train general machine learning or foundation models.
- Security Standards: Maintenance of independent compliance certifications (such as SOC 2 Type II, ISO/IEC 27001, or equivalent industry standards).
2. PRODUCTION SUBPROCESSORS LIST
| Subprocessor | Corporate Entity | Processing Purpose | Location | Security & Transfer Safeguards |
|---|---|---|---|---|
| Deepgram | Deepgram, Inc. San Francisco, CA, USA | Real-time speech-to-text (STT) audio transcription via Nova-3 neural engine. | United States (Enterprise Cloud) | SOC 2 Type II, HIPAA eligible, Standard Contractual Clauses (SCCs). Zero data retention on streaming API. |
| DeepL | DeepL SE Cologne, Germany | Real-time machine translation (MT) of transcripts across supported language pairs. | European Union (Germany, Finland) | ISO 27001 certified, GDPR native, EU-based processing. Enterprise API guarantees zero text persistence or training. |
| Anthropic | Anthropic, PBC San Francisco, CA, USA | Contextual speech translation and linguistic nuance evaluation (Claude 3.5 Sonnet). | United States | SOC 2 Type II, HIPAA eligible, SCCs. Commercial API terms prohibit customer data model training. |
| Groq | Groq, Inc. Mountain View, CA, USA | Ultra-low latency LPU inference for post-session summaries and scripture/reference extraction. | United States | SOC 2 Type II compliant, SCCs. Ephemeral prompt processing with zero retention. |
| Inworld AI | Inworld AI Inc. Mountain View, CA, USA | Real-time bidirectional neural text-to-speech (TTS) synthesis and custom voice model hosting. | United States | SOC 2 Type II, SCCs. Voice samples processed strictly for customer-authorized synthesis. |
| ElevenLabs | Eleven Labs Inc. New York, NY, USA | Advanced multilingual neural voice synthesis and custom voice cloning. | United States & EU | SOC 2 Type II compliant, GDPR compliant, SCCs. Enterprise custom voice privacy controls. |
| Supabase | Supabase, Inc. Singapore / San Francisco, CA, USA | Managed PostgreSQL database hosting, tenant authentication, session metadata, and encrypted audit logs. | United States (AWS us-east-1) | SOC 2 Type II, ISO 27001, HIPAA eligible, encrypted at rest (AES-256) and in transit (TLS 1.3). |
| Cloudflare | Cloudflare, Inc. San Francisco, CA, USA | Global Content Delivery Network (CDN), edge DNS routing, DDoS protection, Web Application Firewall (WAF), and R2 object storage. | Global Edge Network (200+ cities) / USA | SOC 2 Type II, ISO 27001, PCI DSS Level 1, EU Cloud Code of Conduct, SCCs. |
| Stripe | Stripe, Inc. South San Francisco, CA, USA | Payment card tokenization, subscription billing, customer portal management, and statutory tax compliance. | United States / Global | PCI DSS Level 1 certified Service Provider, SOC 1/2, Standard Contractual Clauses. |
| Railway | Railway Corp. San Francisco, CA, USA | Application container compute hosting (FastAPI backend), Redis session caching, and rate limiting execution. | United States (AWS us-east-4) | SOC 2 Type II certified, encrypted in transit and at rest. |
| Resend | Resend, Inc. San Francisco, CA, USA | Transactional email delivery for operator authentication magic links, alerts, and system notices. | United States | SOC 2 Type II compliant, zero-advertising email relay. |
3. SUBPROCESSOR CHANGE NOTIFICATION & OBJECTION PROCEDURE
3.1. Notification of Changes: Company will notify subscribed customer account administrators at least thirty (30) calendar days prior to authorizing any new subprocessor to process customer audio or transcript data.
3.2. Right to Object: A Customer holding a valid Data Processing Agreement may object in writing to the appointment of a new subprocessor on legitimate data protection grounds.
3.3. Resolution & Termination: In the event of a documented objection that cannot be reasonably mitigated, Customer may terminate the affected subscription without penalty prior to the new subprocessor taking effect.
4. CONTACT
For subprocessor compliance inquiries or to request copies of applicable Standard Contractual Clauses:
7 ENTERPRISES, LLC
Attention: Subprocessor Governance & Vendor Risk
Email: privacy@adventvoice7.com