Sub-processors, and where data lives

Where data lives

Providers that process conversation data

Provider	What it does	Data it sees	Where it processes
Supabase	Database, sign-in and file storage, including recordings	Everything Ruyo stores	London, United Kingdom
Fly.io	Runs the Ruyo backend	Everything passing through the backend	London, United Kingdom
Soniox	Speech to text for recorded conversations	Conversation audio and transcripts	United States
Deepgram	Speech to text for dictated notes; an optional alternative for conversations	Audio and transcripts	United States
Groq	AI models: notes during a conversation, after-conversation checks, routing questions	Transcripts and questions	May process data outside the UK, including the United States
Cerebras	AI model: coaching	Transcripts	May process data outside the UK, including the United States
Anthropic	AI model: after-conversation write-up and summaries	Transcripts and the facts picked out of them	United States
OpenAI	AI model: Ask Ruyo answers	Questions and transcript excerpts	May process data outside the UK, including the United States
Cohere	Search: embeddings and ranking	Transcript excerpts and questions	May process data outside the UK, including the United States
Resend	Sends invitation emails to staff	Staff name, email address and organisation name	United States
Google (Calendar API)	Reads a calendar when the business connects one	Appointment titles, times and attendees	May process data outside the UK

Where a provider processes data outside the UK, the transfer is made under a mechanism recognised by UK law: the UK International Data Transfer Addendum to the standard contractual clauses, or the UK-US data bridge where the provider is certified under it, as applicable to that provider. We do not use conversations to train AI models of our own, and we turn off model training where a provider offers that setting.

Suppliers that run our own business

Supplier	What it does	Data it sees	Where it processes
Cloudflare	Hosts this website	Technical request information (for example your IP address) to deliver and protect the site	Global network; may process data outside the UK
Google Workspace	Provides our [email protected] mailbox and documents	Emails you send us, and our reply history	May process data outside the UK

Changes to this list

We give businesses at least 30 days’ notice by email before adding or replacing a provider that processes their conversation data, and they may object on reasonable data-protection grounds in that period. The history of this page is in the date at the top. The full picture of what we collect and why is in the privacy notice.