Sub-processors
Walt is a small team, so a handful of trusted, contractually bound specialists help us run the service. This is the complete list of those specialists currently active — what each one does, what family information it can process, where it processes it, and the safeguard that applies when information crosses a border. Last updated July 11, 2026.
| Who | What they do for your family | What they can see | Where | Cross-border safeguard |
|---|---|---|---|---|
| Supabase, Inc. (on AWS, ca-central-1) | Primary database, authentication, and private file storage | All relational family data; voice recordings and photos; sign-in identities | Canada (AWS Canada Central) | Not applicable — processed and stored in Canada |
| OpenAI, L.L.C. | Transcription, entity extraction, weekly story generation, embeddings, and photo-tag suggestions from context (not facial recognition) | Transcripts and voice audio being processed, plus the minimum family context needed to interpret them (first names, relationships, cities, ages) | United States | DPA with contractual safeguards; API inputs and outputs are not used to train the provider's models and are retained only briefly for abuse monitoring |
| Cloudflare, Inc. (Cloudflare Stream) | Video transcoding, storage, and adaptive playback — videos are uploaded directly by members and never transit Walt's web servers | Video files recorded by family members | Global content-delivery network (no regional pinning) | DPA with contractual safeguards; global CDN processing is disclosed to families |
| Vercel Inc. | Hosting the application and website | Request metadata and redacted server logs — media bytes (recordings, photos, videos) never transit Vercel by design | Global edge network | DPA with contractual safeguards |
| Google LLC (“Sign in with Google”) | Optional federated sign-in for consenting adults | Name, email address, and avatar of adults who choose Google sign-in | Global | DPA / provider terms with contractual safeguards |
| Stripe, Inc. (with Stripe Payments Canada Ltd. where applicable) | Payment processing and billing | Payment card data, name, and billing email — card numbers are never stored by Walt | United States (with Canadian entity where applicable) | DPA with contractual safeguards; PCI-DSS handled by the provider |
| Twilio Inc. | Delivery and verification of one-time passcodes for phone-number sign-in | Phone numbers of members who sign in by phone | United States | DPA with contractual safeguards |
Our commitment
We will notify member families before adding or replacing a sub-processor that handles family content, with time to ask questions — or leave with a full export if you disagree. Every sub-processor is bound by a data-processing agreement, and none may use your family's content for its own purposes, including AI training.
Planned, not yet active
For transparency, these third parties are not currently processing any family information and are therefore not sub-processors today. They are disclosed here in advance and are covered by the notification commitment above before they would ever become active:
- WhatsApp (Meta Platforms) — a planned opt-in notification channel, shown in-app as “coming soon”. Not active.
- Product analytics and error monitoring — planned diagnostic tooling, configured to exclude family content. Not active.