CoachRocks uses the following third-party service providers (subprocessors) to deliver our Services. This list is maintained in accordance with our Data Processing Agreement.
Current subprocessors
| Provider | Purpose | Location |
|---|---|---|
| OpenAI | AI analysis of transcripts (GPT) and fallback transcription | USA-based; processing region not stated by provider (we use the default, no regional residency enabled) |
| Perplexity AI | AI web research on a prospect and their company for discovery/sales-call preparation (no session content) | USA-based; processing region not stated by provider |
| EnrichLayer | LinkedIn public-profile lookup for discovery/sales-call preparation (no session content) | USA |
| Cloudflare | Frontend hosting (Pages), storage of uploaded recordings (R2), CDN, Workers | Global network; R2 bucket in the Asia-Pacific (APAC) region |
| Neon (a Databricks company) | PostgreSQL database hosting | USA (AWS us-east-1) |
| Skribby | Meeting recorder bot; transcription of bot recordings via Soniox; Skribby's copy is deleted once the transcript is stored | EU (Germany, Ireland) per provider's sub-processor list; transcription in the USA |
| Soniox | Speech-to-text transcription with speaker separation | USA (api.soniox.com endpoint) |
| Loops | Transactional email delivery | USA (AWS) |
| OAuth authentication, Calendar integration (read-only); Google Ads conversion tag on the marketing site and the dashboard (consent-gated on both — denied until you accept the cookie banner) | Not stated by provider (global infrastructure) | |
| Microsoft | OAuth authentication and Outlook Calendar integration (read-only), if connected | Not stated by provider (global infrastructure) |
| PostHog | Product analytics (with user consent) | EU (AWS eu-central-1, Frankfurt) |
| PayPal | Subscription billing and payment processing (coach accounts only) | Not stated by provider (global) |
Vendor commitments last reviewed against each provider's own privacy, DPA and security pages on 6 September 2026; this page last updated 10 September 2026. What each provider receives from CoachRocks, and its stated commitments in its own words, are on the Trust page (section 8).
Changes to this list
We may update this list as our infrastructure evolves. This page is the authoritative, current list, and we keep it up to date: any addition or replacement is published here before the new subprocessor begins processing personal data. For material changes we also tell active users directly, by in-product announcement or email. Section 6 of the DPA sets out your right to object.
Contact
For questions about our subprocessors, email support@coachrocks.com.
See also: Privacy Policy · Terms of Service · Data Processing Agreement · AI Transparency Notice