Last updated: 1 November 2026
These are the subprocessors Function 365 Limited, trading as Daybeat, engages to process personal data for Daybeat, including the personal data in your Workspace that we process for you under the Data Processing Agreement at https://daybeat.io/dpa. Each entry gives the subprocessor's name, what it does for Daybeat, the data it processes, where that data is hosted and the transfer safeguard that applies. The Data Processing Agreement governs how subprocessors are appointed and replaced.
1. Subprocessors
| Subprocessor | Purpose | Data processed | Hosting region | Transfer safeguard |
|---|---|---|---|---|
| Neon Inc. | Managed PostgreSQL: the primary application database | All account, Workspace, content, transcript, audit and billing-mirror data | United Kingdom (London) | Not applicable: hosted in the UK |
| Cloudflare, Inc. | Object storage (R2) for Workspace images, original upload bytes, brief artefacts, export bundles and public brand logos | Images (which may depict people), filenames and content files | EU (R2 EU jurisdiction storage) | UK IDTA / EU SCCs |
| Hostinger International Ltd. | Server compute running the Daybeat web application and workers | All data in transit through the application; container logs | United Kingdom (London) | Not applicable: hosted in the UK |
| Anthropic PBC | AI text generation, ideation, interviewing, synthesis and ranking | Prompt content: your offerings, brand voice, pain points, interview answers, topic briefs and generated drafts | US | UK IDTA / EU SCCs |
| OpenRouter, Inc. | AI model routing for drafting councils, interview screening and extraction, embeddings, image classification and moderation, and image generation | The same prompt content as Anthropic, plus uploaded images (downscaled) for classification and moderation | US, plus each routed text-model provider listed in section 2 | UK IDTA / EU SCCs |
| typesafe.ai | Content classification and risk screening (agent calls) | Prompt text, drafts and research text submitted for classification | US | UK IDTA / EU SCCs |
| Resend, Inc. | Transactional email delivery: account, billing, lifecycle and operations notices | Recipient email address, name and email body content | US (no EU residency) | UK IDTA / EU SCCs |
| Stripe, Inc. / Stripe Payments Europe Ltd. | Payment processing, subscription billing, Stripe Tax and the hosted billing portal | Name, billing address, email, tax ID, payment method (collected by Stripe directly) and subscription records | US parent, European entity for EU and UK customers | Stripe's data processing agreement and SCCs |
| Google LLC (Google Fonts) | Webfont delivery on the public marketing pages only | Visitor IP address and user agent at request time; no storage by Daybeat | US | Public-site disclosure, not a processor of stored Workspace data |
2. Text-model providers reached through OpenRouter
OpenRouter routes requests to the text-model providers below. Requests routed through OpenRouter carry a data-policy setting that restricts routing to providers which do not collect user data.
| Provider | Purpose | Data processed | Hosting region | Transfer safeguard |
|---|---|---|---|---|
| Anthropic | Interview screening and extraction | Interview material and research text | US | UK IDTA / EU SCCs |
| Moonshot AI | Drafting council member | Prompt content and generated drafts | EU or US hosted compute (provider headquartered in China) | UK IDTA / EU SCCs |
| DeepSeek | Drafting council member | Prompt content and generated drafts | EU or US hosted compute (provider headquartered in China) | UK IDTA / EU SCCs |
| Drafting council member | Prompt content and generated drafts | EU or US hosted compute | UK IDTA / EU SCCs | |
| OpenAI | Text embeddings | Prompt content and generated drafts | EU or US hosted compute | UK IDTA / EU SCCs |