Subprocessors
Last updated 17 September 2026
The third parties we use to deliver Agent Legend, what each one does, and where it processes data. We will update this page before adding a new subprocessor that handles personal data, and agency customers can ask to be notified of changes.
Current subprocessors
| Vercel (application hosting) — United States, with a global edge network | Runs the Agent Legend application. Requests are served from a global network, so a request may be processed outside the UK in transit; the data itself is stored in the database below. |
| Neon (database hosting) — United Kingdom | Stores all tenant and account data at rest, including the database’s own backups, in the UK. |
| Resend (email delivery) — Ireland (EEA) | Sends alerts, viewing confirmations and the morning brief on our behalf, from send.agentlegend.co.uk. Processes recipient name and email address, subject line and message body. Delivery metadata is retained by Resend; we do not retain the body of a sent email once it has gone. |
| Amazon Web Services, SES (email infrastructure) — Ireland (EEA) | Resend sends through Amazon SES, so AWS processes the same email data in transit. Named here because it sits underneath our email provider rather than being appointed by us directly. |
| Twilio (telephony) — United States | Delivers out-of-hours emergency texts and calls to the agency’s own on-call staff, and carries the telephone channel’s calls into our voice platform where an agency enables that channel. Processes the phone numbers involved and the alert’s content — which can include a tenant’s address and their own words about what is wrong — in the United States, under the International Data Transfer Addendum to the EU Standard Contractual Clauses. The product states this on screen where the number is configured. |
| Retell AI (voice platform) — United States | Carries the telephone channel where an agency enables it: answers the agency’s AL number, streams the call, and produces the transcript the conversation runs on. Processes caller audio, transcripts and the phone numbers involved, under its data processing terms with standard contractual clauses. Not used at all unless the telephone channel is switched on. |
| OpenAI (telephone-channel language model, via Retell) — United States | Conducts AL’s spoken conversation on the telephone channel only, seeing the call’s transcript as the conversation happens. API content is not used to train the provider’s models under its terms. Every factual answer is fetched from the agency’s verified record by our own systems — the model never supplies facts. |
Not currently appointed
We have no payment provider, because Agent Legend is not yet charging anyone. It will appear here, before it processes any personal data, when that changes.
In the written product — front-desk replies, offer handling, repair triage — there is no third-party AI model: those run on deterministic rules on our own infrastructure, and no written customer content is sent to an AI company. The telephone channel’s providers are listed above, are engaged only for agencies that switch that channel on, and any further AI provider will be named here before any content reaches it.
One platform, one controller relationship
SalesRelay, the sales-progression half of the platform, is operated by the same company and publishes its own subprocessor list at salesrelay.uk/legal/subprocessors. Where your agency uses both, a sale-agreed handover moves data between two systems run by the same controller-processor relationship, not to a third party.
Questions
For the current named list, regions, and a copy of our DPA, email hello@agentlegend.co.uk.
Questions about any of this? hello@agentlegend.co.uk