# Spun s.r.l.

Spun s.r.l. (spun.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/spun-s-r-l
- Documents last verified: 2026-09-30
- Transparency rating: 64/100 (how much it publishes, not how secure it is)
- Cite as: Spun s.r.l., Third Party Index, https://thirdpartyindex.com/vendors/spun-s-r-l (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Subprocessor list | https://spun.com/privacy/subprocessors/ | 2026-09-30 | 2026-09-30 |
| Privacy policy | https://spun.com/privacy-policy/ | 2026-09-30 | 2026-09-30 |
| Terms | https://spun.com/terms-of-service/ | 2026-09-30 | 2026-09-30 |
| Security page | https://spun.com/security/ | 2026-09-30 | 2026-09-30 |

## Subprocessors (28)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Anthropic, PBC](https://thirdpartyindex.com/vendors/anthropic.md) | PurposeAlternative large-language-model provider for AI text features, selected by configuration in place of OpenAI | United States | 2026-09-30 |
| [AssemblyAI](https://thirdpartyindex.com/vendors/assemblyai.md) | PurposeLong-form audio transcription with speaker diarization (the provider used when a recording needs speakers told apart) | United States | 2026-09-30 |
| BulkVS | PurposeSIP trunk for outbound voice OTP delivery | United States | 2026-09-30 |
| [Chatwoot](https://thirdpartyindex.com/vendors/chatwoot.md) | PurposeEmbedded live-chat widget on marketing site and in-app help | EU / US (configurable) | 2026-09-30 |
| [Cloudflare, Inc.](https://thirdpartyindex.com/vendors/cloudflare.md) | PurposeCDN, load balancer, WAF, DDoS protection, R2 object storage, TURN servers, Pages hosting | Global edge (PoPs near user) | 2026-09-30 |
| Cloudflare TURN | PurposeNAT-traversal relay for 1:1 WebRTC calls when direct P2P fails | Global edge | 2026-09-30 |
| [Deepgram](https://thirdpartyindex.com/vendors/deepgram.md) | PurposeSpeech-to-text (Nova-3) | United States | 2026-09-30 |
| [ElevenLabs](https://thirdpartyindex.com/vendors/elevenlabs.md) | PurposeHigh-quality text-to-speech | United States / EU | 2026-09-30 |
| [Firebase Cloud Messaging (Google)](https://thirdpartyindex.com/vendors/firebase.md) | PurposePush notifications for incoming messages and calls | United States | 2026-09-30 |
| [Google (Gmail send, your own account)](https://thirdpartyindex.com/vendors/google-cloud.md) | PurposeOAuth identity provider for sign-in; PurposeSending email from your own Gmail address, one recipient at a time, when you connect your Google account | United States; United States / global | 2026-09-30 |
| [Google Analytics](https://thirdpartyindex.com/vendors/google-cloud.md) | PurposeMarketing-site visitor analytics (spun.com and country variants) | United States | 2026-09-30 |
| [Google Cloud (Speech-to-Text and Text-to-Speech)](https://thirdpartyindex.com/vendors/google-cloud.md) | PurposeSpeech-to-text fallback, and text-to-speech for standard voices | United States / global | 2026-09-30 |
| [Groq, Inc.](https://thirdpartyindex.com/vendors/groq.md) | PurposeSpeech-to-text (Whisper large-v3-turbo) when the Groq provider is chosen for a transcription | United States | 2026-09-30 |
| [Hetzner Online GmbH](https://thirdpartyindex.com/vendors/hetzner-online.md) | PurposePrimary application servers and PostgreSQL database | Nuremberg, Germany (EU) | 2026-09-30 |
| Infatica | PurposeResidential proxy network for the temporary WhatsApp connection: in countries where the WhatsApp gateway has no regional connection, new connections without Self Proxy reach WhatsApp through a residential internet address in the country you confirm when connecting. Not used for organisations on Self Proxy or on a regional connection of the gateway | Exit in the country you confirm when connecting (global residential network) | 2026-09-30 |
| LiveKit Cloud | PurposeSFU for group calls and translation rooms with 3+ participants, and server-side recording of a meeting when a host turns recording on | United States / global | 2026-09-30 |
| [Microsoft Azure (Cognitive Services Speech)](https://thirdpartyindex.com/vendors/microsoft.md) | PurposeFallback STT and TTS for specialty languages and dialects | EU / US (configurable) | 2026-09-30 |
| netcup GmbH | PurposeRegional cell servers (US region) and self-hosted real-time media nodes | Nuremberg, Germany (EU) and Manassas, Virginia (US) | 2026-09-30 |
| [OpenAI, LLC](https://thirdpartyindex.com/vendors/openai.md) | PurposeAI compose, improve, summaries, smart replies, classification, search embeddings, Weave assistant, Whisper transcription, text-to-speech | United States | 2026-09-30 |
| [PostHog](https://thirdpartyindex.com/vendors/posthog.md) | PurposeProduct analytics and session replay, on the marketing site and in the Spun app | EU (PostHog EU Cloud, eu.posthog.com) | 2026-09-30 |
| [Sarvam AI](https://thirdpartyindex.com/vendors/sarvam-ai.md) | PurposeIndian-language STT, TTS and translation | India | 2026-09-30 |
| [SendGrid (Twilio)](https://thirdpartyindex.com/vendors/sendgrid.md) | PurposeTransactional email: invitations, password resets, confirmation codes, notifications. Also receives replies to email you send from Spun, on a receive-only domain that cannot send. | United States | 2026-09-30 |
| Sofer.ai | PurposeHebrew speech-to-text (the default transcription provider for Hebrew audio) | United States | 2026-09-30 |
| Speechify | PurposeText-to-speech voices | United States | 2026-09-30 |
| [Speechmatics](https://thirdpartyindex.com/vendors/speechmatics.md) | PurposeSpeech-to-text (specialty languages) | United Kingdom / EU | 2026-09-30 |
| TextGrid | PurposeSMS delivery for invitation and verification messages sent from Spun-operated numbers | United States | 2026-09-30 |
| [Twilio (Programmable Voice)](https://thirdpartyindex.com/vendors/twilio.md) | PurposeCarries inbound and outbound phone calls on the Twilio number an organisation connects, and records a call when call recording is on | United States / global | 2026-09-30 |
| VitalPBX | PurposeSelf-hosted SIP PBX for voice OTP delivery | Self-hosted (Spun-owned, US data center) | 2026-09-30 |

Read from ([evidence](https://thirdpartyindex.com/evidence/21055)). CSV: https://thirdpartyindex.com/vendors/spun-s-r-l/subprocessors.csv

### Its own affiliates (1)

- Spun relay servers (Self Proxy) (Nuremberg, Germany (EU) and Manassas, Virginia (US))

## Listed as a subprocessor by (0)

No tracked vendor lists it.

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api