These are the third parties that may Process Personal Data when Common Ninja Ltd. provides Vidocu to its customers. Each one is bound by written data protection terms. How we add new sub-processors, and how customers can object, is set out in Section 5 of our Data Processing Addendum.
Infrastructure
| Sub-processor | Processing location | Purpose |
|---|---|---|
| Amazon Web Services, Inc. | USA (Oregon, us-west-2) | File storage, serverless processing and video rendering; face detection used only to keep a speaker in frame when a video is reformatted |
| MongoDB, Inc. (MongoDB Atlas, on AWS) | USA (Virginia, us-east-1) | Managed database |
| Railway Corp. | USA | Application hosting |
| Cloudflare, Inc. | Global edge (US company) | CDN, DNS, DDoS protection and web application firewall |
| Domainee (Common Ninja Ltd., on AWS) | Germany (Frankfurt) | TLS and routing for customers' custom knowledge base domains |
AI processing
| Sub-processor | Processing location | Purpose |
|---|---|---|
| Google LLC (Gemini API) | USA | Video and audio analysis, transcription, document conversion |
| OpenAI, L.L.C. | USA | Subtitles, articles, scripts and translation |
| ElevenLabs, Inc. | USA | AI voiceovers and voice cloning |
| HeyGen, Inc. | USA | AI avatar videos |
| Anthropic, PBC | USA | In-app AI assistant, AI Recorder and Pulse |
Business operations
| Sub-processor | Processing location | Purpose |
|---|---|---|
| Stripe, Inc. | USA | Payments and subscriptions |
| SendRaven (Common Ninja Inc., on Amazon SES) | USA (Oregon, us-west-2) | Transactional and product email |
| Google LLC (Google Sign-In) | USA | Sign-in with a Google account, when the user chooses it |
| Microsoft Corporation (Microsoft Entra ID) | USA | Sign-in with a Microsoft account, when the user chooses it |
| Kloudend, Inc. (ipapi) | USA | Country lookup from IP address at sign-up |
Analytics and marketing
These run on our website and in the Vidocu web app. They do not run on customers' knowledge bases.
| Sub-processor | Processing location | Purpose |
|---|---|---|
| Google LLC (Google Analytics, Tag Manager, Google Ads) | USA | Website and product analytics, ad conversion measurement |
| Microsoft Corporation (Microsoft Clarity) | USA | Product analytics and session insights |
| Rewardful | USA | Affiliate referral tracking |
| Common Ninja Inc. | USA | Embedded website widgets |
Changes to this list
We email the owners of each customer workspace, and update this page, at least 30 days before a new sub-processor starts processing personal data. To receive these notices at another address, or to object to a new sub-processor, write to [email protected].
Integrations that a customer connects to their own accounts, such as Zendesk, Intercom, Notion, YouTube or GitHub, act on the customer's instructions and are not our sub-processors. Enterprise single sign-on connects to the customer's own identity provider.
Last updated: September 27, 2026