Hosting, storage and identity
| Vendor | What it does | Data it receives | Location |
|---|---|---|---|
| VercelEvery page and API request | Web and API hosting, deployments and runtime logs | Request metadata, content in transit to your data store, runtime logs | United States |
| ConvexStoring your workspace data | Databases: one isolated data store per user, plus a shared control plane for identity and routing | Account content you create or connect, account identifiers, encrypted connection tokens | United States |
| Amazon Web Services (S3)Documents, photos, media and exports | File and artifact storage with per-user prefixes; account-closure exports; consent receipts | Files you upload or import, generated artifacts, legal acceptance receipts | United States (us-east-1) |
| Trigger.devSync, imports and scheduled work | Background jobs such as syncing, document processing and scheduled workflows | Job payloads containing workspace content, job logs (counts, not content) | United States |
| Upstash (QStash)Scheduled tasks and reminders | Delivers scheduled and recurring jobs back to our servers at the set time | Job identifiers, task details in scheduled job payloads | Not yet confirmed |
| WorkOSSigning in | Sign-in, identity and session management | Name, email address, authentication events | United States |
Vercel
Web and API hosting, deployments and runtime logs
- Data it receives
- Request metadata, content in transit to your data store, runtime logs
- Location
- United States
Convex
Databases: one isolated data store per user, plus a shared control plane for identity and routing
- Data it receives
- Account content you create or connect, account identifiers, encrypted connection tokens
- Location
- United States
Amazon Web Services (S3)
File and artifact storage with per-user prefixes; account-closure exports; consent receipts
- Data it receives
- Files you upload or import, generated artifacts, legal acceptance receipts
- Location
- United States (us-east-1)
Trigger.dev
Background jobs such as syncing, document processing and scheduled workflows
- Data it receives
- Job payloads containing workspace content, job logs (counts, not content)
- Location
- United States
Upstash (QStash)
Delivers scheduled and recurring jobs back to our servers at the set time
- Data it receives
- Job identifiers, task details in scheduled job payloads
- Location
- Not yet confirmed
WorkOS
Sign-in, identity and session management
- Data it receives
- Name, email address, authentication events
- Location
- United States
AI model providers
| Vendor | What it does | Data it receives | Location |
|---|---|---|---|
| OpenAIChat, planning, memory, documents, photos and meeting summaries | Primary language, vision and reasoning models | Prompts, relevant workspace content, images you process, model outputs | United States |
| HemmingwayAnswers and drafted text | Writes final user-facing answers and drafts; falls back to OpenAI | Prompts, conversation history, retrieved workspace evidence | Not yet confirmed |
| GroqVoice input and meeting processing | Speech-to-text and some fast classification steps | Voice audio, short text excerpts | United States |
| Inception LabsLive meeting assist and voice | Fast decisions during live meeting assist and voice turns | Recent caption lines, short voice-turn text | United States |
| Voyage AISearch and memory recall | Embeddings and reranking for search and memory | Text excerpts, images for multimodal search | United States |
| TypeSafeAssisted browsing | Typed judgments that check steps in assisted browsing and routing | Task text, page snippets from sites you ask it to use | Not yet confirmed |
| Atlas Cloud (upstream: ByteDance Seedance)Social media video | Video generation for social media; we request 24-hour retention and copy results to our storage | Video prompts you write, generated video | United States (upstream model provider region not yet confirmed) |
| ElevenLabsRead-aloud and voice replies | Text-to-speech | Text to be read aloud | United States |
OpenAI
Primary language, vision and reasoning models
- Data it receives
- Prompts, relevant workspace content, images you process, model outputs
- Location
- United States
Hemmingway
Writes final user-facing answers and drafts; falls back to OpenAI
- Data it receives
- Prompts, conversation history, retrieved workspace evidence
- Location
- Not yet confirmed
Groq
Speech-to-text and some fast classification steps
- Data it receives
- Voice audio, short text excerpts
- Location
- United States
Inception Labs
Fast decisions during live meeting assist and voice turns
- Data it receives
- Recent caption lines, short voice-turn text
- Location
- United States
Voyage AI
Embeddings and reranking for search and memory
- Data it receives
- Text excerpts, images for multimodal search
- Location
- United States
TypeSafe
Typed judgments that check steps in assisted browsing and routing
- Data it receives
- Task text, page snippets from sites you ask it to use
- Location
- Not yet confirmed
Atlas Cloud (upstream: ByteDance Seedance)
Video generation for social media; we request 24-hour retention and copy results to our storage
- Data it receives
- Video prompts you write, generated video
- Location
- United States (upstream model provider region not yet confirmed)
ElevenLabs
Text-to-speech
- Data it receives
- Text to be read aloud
- Location
- United States
Communications
| Vendor | What it does | Data it receives | Location |
|---|---|---|---|
| StreamMeetings | Video meetings, captions and transcription when the host turns it on | Audio and video streams, display names, transcripts when enabled | Global edge network; region set in the vendor dashboard |
| TelnyxPhone calls | Browser phone calls and call transcription | Phone numbers, call audio, call transcripts | United States |
| Amazon Web Services (SES)System email and invites | Transactional email such as invites, trial notices and receipts; optional managed mailbox | Email addresses, message content we send for you | United States (us-west-2) |
| ExpoMobile notifications | Delivers push notifications to the mobile app | Device push token, notification title and text | Not yet confirmed |
Stream
Video meetings, captions and transcription when the host turns it on
- Data it receives
- Audio and video streams, display names, transcripts when enabled
- Location
- Global edge network; region set in the vendor dashboard
Telnyx
Browser phone calls and call transcription
- Data it receives
- Phone numbers, call audio, call transcripts
- Location
- United States
Amazon Web Services (SES)
Transactional email such as invites, trial notices and receipts; optional managed mailbox
- Data it receives
- Email addresses, message content we send for you
- Location
- United States (us-west-2)
Expo
Delivers push notifications to the mobile app
- Data it receives
- Device push token, notification title and text
- Location
- Not yet confirmed
Search, maps and tools
| Vendor | What it does | Data it receives | Location |
|---|---|---|---|
| CloudConvertDocument conversion and export | Converts documents between file formats | File contents you convert, file names | Not yet confirmed |
| DaytonaCode assistant | Isolated sandboxes that run code the assistant writes for you | Code, files and data you ask it to process | Not yet confirmed |
| SerpApiProduct price and specialized search | Web and shopping search results | Search queries, which can include what you asked for | Not yet confirmed |
| SerperWeb search | Web search results | Search queries, which can include what you asked for | Not yet confirmed |
| LLMLayerResearch | Web search for research reports | Research queries | Not yet confirmed |
| OpenWeatherWeather and proactive suggestions | Weather forecasts | City name or coordinates | Not yet confirmed |
| Google Maps PlatformPlaces and directions | Place search, address autocomplete and directions | Place and address queries, coordinates, IP address | Not yet confirmed |
| Other mapping providersPlaces and directions | Place search, geocoding, routing and address checks, used only when configured and as fallbacks: Mapbox, HERE, TomTom, Foursquare, Yelp, Geoapify, Radar, OpenCage, Loqate, OpenRouteService, Smarty and what3words | Place and address queries, coordinates | Not yet confirmed |
| OpenStreetMap public servicesPlaces fallback | Free place search and geocoding used as a fallback: Nominatim, Photon and Overpass | Place and address queries, coordinates | Not yet confirmed |
| Cesium3D maps | 3D map tiles loaded by your browser | IP address, map areas you view | Not yet confirmed |
CloudConvert
Converts documents between file formats
- Data it receives
- File contents you convert, file names
- Location
- Not yet confirmed
Daytona
Isolated sandboxes that run code the assistant writes for you
- Data it receives
- Code, files and data you ask it to process
- Location
- Not yet confirmed
SerpApi
Web and shopping search results
- Data it receives
- Search queries, which can include what you asked for
- Location
- Not yet confirmed
Serper
Web search results
- Data it receives
- Search queries, which can include what you asked for
- Location
- Not yet confirmed
LLMLayer
Web search for research reports
- Data it receives
- Research queries
- Location
- Not yet confirmed
OpenWeather
Weather forecasts
- Data it receives
- City name or coordinates
- Location
- Not yet confirmed
Google Maps Platform
Place search, address autocomplete and directions
- Data it receives
- Place and address queries, coordinates, IP address
- Location
- Not yet confirmed
Other mapping providers
Place search, geocoding, routing and address checks, used only when configured and as fallbacks: Mapbox, HERE, TomTom, Foursquare, Yelp, Geoapify, Radar, OpenCage, Loqate, OpenRouteService, Smarty and what3words
- Data it receives
- Place and address queries, coordinates
- Location
- Not yet confirmed
OpenStreetMap public services
Free place search and geocoding used as a fallback: Nominatim, Photon and Overpass
- Data it receives
- Place and address queries, coordinates
- Location
- Not yet confirmed
Cesium
3D map tiles loaded by your browser
- Data it receives
- IP address, map areas you view
- Location
- Not yet confirmed
Billing, security and operations
| Vendor | What it does | Data it receives | Location |
|---|---|---|---|
| StripePaid plans | Payments, subscriptions and billing portal (Stripe-hosted checkout) | Billing contact details, payment details (held by Stripe), plan metadata | United States |
| ArcjetProtecting sign-up, checkout and public endpoints | Rate limiting, abuse protection and checkout email validation | IP address, request metadata, email address at checkout | United States |
| AxiomReliability monitoring | Operational logs and sampled traces under a fixed schema that excludes content | Pseudonymous identifiers, route and error labels, timings | United States (us-east-1) |
| PostHogProduct analytics (opt-in) | Product analytics, only if you opt in; IP addresses are replaced before storage | Pseudonymous identifier, allow-listed product events | Set by our analytics project host; not yet confirmed |
| Vercel Analytics and Speed InsightsSite performance (with consent) | Cookieless page-view and performance measurement, loaded only with your consent | Page URL, performance timings, aggregated device type | United States |
Stripe
Payments, subscriptions and billing portal (Stripe-hosted checkout)
- Data it receives
- Billing contact details, payment details (held by Stripe), plan metadata
- Location
- United States
Arcjet
Rate limiting, abuse protection and checkout email validation
- Data it receives
- IP address, request metadata, email address at checkout
- Location
- United States
Axiom
Operational logs and sampled traces under a fixed schema that excludes content
- Data it receives
- Pseudonymous identifiers, route and error labels, timings
- Location
- United States (us-east-1)
PostHog
Product analytics, only if you opt in; IP addresses are replaced before storage
- Data it receives
- Pseudonymous identifier, allow-listed product events
- Location
- Set by our analytics project host; not yet confirmed
Vercel Analytics and Speed Insights
Cookieless page-view and performance measurement, loaded only with your consent
- Data it receives
- Page URL, performance timings, aggregated device type
- Location
- United States
Changes to this list
We'll post changes here 30 days in advance where feasible. To get notice of changes by email, subscribe by emailing jonathan@smartmanager.ai with the subject "Subprocessor updates".
International transfers
Smart Manager processes data in the United States. For personal data from the EEA, Switzerland or the UK, we rely on the EU Standard Contractual Clauses (Commission Decision 2021/914) and the UK International Data Transfer Addendum where a vendor's data processing terms include them. We have not yet confirmed or countersigned any vendor's terms, so each transfer mechanism below reads "Not yet confirmed" until we have; ask us for the current status of any vendor. The public OpenStreetMap services we fall back to have no contract with us and receive only place queries and coordinates.
Services you connect
Services you choose to connect, such as Google, Microsoft, Apple iCloud, Slack or a CRM, are not our subprocessors. You authorize them, they hold your data under their own terms, and Smart Manager reads from them (and sends messages only when you approve it).
Questions
Ask for the current contract status of any vendor, or object to a new one, at jonathan@smartmanager.ai. How we use personal data is described in our Privacy Policy.