Sumnote: Sub-processors
Last updated: July 13, 2026
This page lists the third-party service providers (“sub-processors”) that process personal information on Sumnote’s behalf to run the Service. It supplements our Privacy Policy.
We do not sell your personal information. We share it only with sub-processors who process it on our behalf, under terms that require them to protect it and use it only for the services they provide to us. We maintain this list current and give customers advance notice (at least 30 days where practicable) before adding a new one.
Always-on sub-processors
These process data for every customer.
| Provider | Purpose | What they process | Location |
|---|---|---|---|
| Amazon Web Services | Cloud infrastructure and storage | All customer data (account, meeting audio, transcripts, files) | United States |
| Anthropic | AI extraction of action items, decisions, summaries | Meeting transcripts (text only) | United States |
| OpenAI | Backup speech-to-text transcription; backup extraction | Meeting audio (transcription); transcripts (extraction) | United States |
| AssemblyAI | Primary speech-to-text transcription | Meeting audio | United States |
| RunPod | GPU compute for training Sumnote's own models | The redacted training set only (identifiers stripped; no audio; no voiceprints) | United States |
| Google (Gmail SMTP) | Outbound email | Recipient email address and message content | United States |
| Google (Firebase Cloud Messaging) | Push notifications | Device push tokens and notification previews | United States |
Conditional sub-processors
These process data only in the circumstances stated.
| Provider | Activates when | What they process |
|---|---|---|
| Google (Workspace APIs) | You sign in with Google or connect Google Calendar / Meet | Authentication tokens; calendar events you sync; meeting metadata |
| Zoom | You connect your Zoom account | Authentication tokens and meeting metadata. The call itself is handled by Zoom as your meeting platform, under Zoom's own terms |
| Stripe | We launch paid plans and you subscribe | Billing details and transaction history (card data handled by Stripe directly) |
Note. We use AssemblyAI for speech-to-text only; voiceprints are computed within our own systems, not by AssemblyAI. We do not use any analytics provider that tracks you inside the application.