Orai subprocessor list
Initial public subprocessor list published.
Orai uses selected service providers to operate, secure, analyze, and support the Orai service. The providers below may process customer information for the stated purpose. The information sent to each provider is limited according to the service being performed.
Last updated 01/01/2026
A subprocessor is a service provider Orai engages to process customer information on Orai's behalf in support of the service. Providers receive only the information needed for their stated purpose.
| Provider and service | Purpose | Information involved | Primary processing location | Status |
|---|---|---|---|---|
| Google LLCGoogle Cloud Platform and Google Cloud Speech-to-Text | Production hosting, storage, infrastructure, and speech transcription where enabled | Account identifiers, audio, transcripts, application data, logs, and derived coaching results | United States; Orai production hosting is configured in GCP US-West | Current |
| Amazon Web Services, Inc.Amazon Transcribe | Speech-to-text processing where the AWS transcription engine is enabled | Audio submitted for transcription and resulting transcript | United States - Oregon (us-west-2) | Current |
| OpenAI, L.L.C.OpenAI | AI services used to generate or support product features | Prompts, scripts, transcripts, feature inputs, generated outputs, and pseudonymous user or account identifiers where needed to provide the feature | United States / global provider infrastructure | Current |
| Deepgram, Inc.Deepgram | Speech-to-text processing | Audio submitted for transcription, related processing metadata, and resulting transcripts | United States / global provider infrastructure | Current |
| Google LLCGemini | AI services used to generate or support product features | Prompts, scripts, transcripts, feature inputs, generated outputs, and pseudonymous user or account identifiers where needed to provide the feature | United States / global provider infrastructure | Current |
| Twilio Inc.SendGrid | Transactional and marketing email delivery | Recipient name and email, message content, subscription or marketing preferences, and delivery or engagement metadata | United States / provider infrastructure | Current |
| Google LLCGoogle Analytics | Product analytics and measurement | Online identifiers, IP-derived information, device/browser data, and product-interaction events; no audio or transcript content intended | United States / global provider infrastructure | Current |
| Functional Software, Inc.Sentry | Product analytics, application monitoring, and error tracking | Pseudonymous user or account identifiers, device and app details, diagnostic logs, error data, and product-interaction events; no audio or transcript content intended | United States / global provider infrastructure | Current |
| PostHog, Inc.PostHog | Product analytics | Pseudonymous user or account identifiers, device and app details, and product-interaction events; no audio or transcript content intended | United States / global provider infrastructure | Current |
| Stripe, LLCStripe | Payment processing and subscription management | Customer contact and billing details, payment or subscription identifiers, and transaction metadata; payment credentials are handled directly by Stripe | United States / global provider infrastructure | Current |
| Amplitude, Inc.Amplitude | Product analytics | Pseudonymous user/account identifiers, device/app details, and product-interaction events; no audio or transcript content intended | United States - Amplitude US environment | Current |
A listed provider may act as Orai's processor or subprocessor for some activities and as an independent controller for activities it determines under applicable law. Stripe, for example, may act independently for certain identity, fraud-prevention, financial-regulatory, and legal-compliance processing.
Orai provides notice of a new or replacement subprocessor by publishing the planned change on this page at least 30 days before the provider begins processing customer information. Individual email notice is not provided unless expressly required by a customer's Order Form. Customers may raise a reasonable data-protection objection within 15 days after publication by contacting [email protected].
Initial public subprocessor list published.
Contact Orai for questions about a provider or to raise a data-protection objection.