1. Subprocessor list
- Supabase Inc. (United States - hosted on AWS) - Authentication, PostgreSQL database, file storage, and edge functions. Processes account data, session records, uploaded documents, and billing records.
- Amazon Web Services, Inc. (United States - us-east-1 production / us-west-2 development) - API compute (Lambda), API Gateway, object storage (S3 for session memory), secrets management (SSM Parameter Store), and logging (CloudWatch). Processes application data, server logs, and session memory vectors.
- Cloudflare, Inc. (Global) - Web delivery, DDoS mitigation, WAF, and edge compute (Cloudflare Workers) for the web client. Processes request metadata and CDN traffic.
- Stripe, Inc. (United States / Global) - Payment processing, subscription billing, and billing record management. Processes payment card data, billing details, and subscription status.
- Google LLC (United States / Global) - Gemini Live API for real-time voice sessions (VAD, STT, LLM, TTS); Gemini API for post-session coaching analysis, document extraction, and visa intelligence data refresh. Processes session audio during live calls, transcript text, and document content.
- LiveKit, Inc. (United States / Global) - Real-time WebRTC voice infrastructure and AI agent orchestration. Routes audio between users and the AI voice agent. Processes session audio streams and real-time communication metadata.
2. Updates
This list reflects the subprocessors active as of the Last Updated date above. We will update this page when subprocessors are added, removed, or their role changes materially.
Vendor questions can be sent to support@visaprepagent.com.