Last updated 2 November 2026

Subprocessors

Quotem uses a small number of companies to run the service. These are the ones that handle your information. The list was last checked against the code on 11 October 2026 and has not yet been reviewed by a solicitor. Healthchecks.io watches that the service is running; it receives a signal every minute and the names of any open alerts, and no personal information.

  • Supabase

    Database, authentication, file storage and server functions.

    United Kingdom (London region).

  • Lovable

    Hosts Quotem's test system, where the Quotem team tries changes before they reach customers. The live app is not hosted here.

    Served worldwide from a content delivery network.

  • Mux

    Prepares video answers for playback and writes their captions. Audio answers never reach it.

    United States.

  • Anthropic

    The AI models that draft and check content from a transcript. When a team asks Quotem to find sources for a piece, or Quotem's assistant looks something up, the search runs through Anthropic and its search partner.

    United States.

  • Google

    Speech to text, turning a recording into a transcript. Quotem deletes the recording from Google as soon as the transcript is back and asks Google not to keep the request; anything left is deleted by Google within 48 hours. Google also provides the YouTube service Quotem reads when a customer brings in a public video by its link, and, only when a team connects it, that team's own Google Analytics figures.

    United States and other Google regions.

  • Resend

    Sending email, such as capture links and sign-off links.

    United States.

  • Cloudflare

    Serves the app's pages (since 28 September 2026). Also keeps off-platform backup copies of recordings, graphics, clips and the database, sign-in accounts included, so nothing is lost if our main provider fails. A copy of a deleted recording is removed when its 14-day protection ends, and a database export within thirty days.

    Pages: served worldwide. Backups: Cloudflare R2, European Union.

  • HTMLCSStoImage

    Turns a finished quote card into an image. Receives the words of the quote and the contributor's name and job title, or the description they chose instead.

    United States.

  • Google Fonts, Fontshare and jsDelivr

    Typefaces for the app and for graphics. Your browser fetches the font files from them directly, which tells them its network address. Nothing else is sent.

    Google Fonts in the United States; Fontshare and jsDelivr serve from content delivery networks with no single location.

  • PostHog

    Product analytics for people signed in to Quotem: which pages they open and a few actions, such as creating an Ask or approving a piece. Receives their Quotem account id and team id, and the browser details and network address that any website receives; never a name, an email address or the words of any piece. Keeps the events for a year. Never used on the pages contributors and approvers reach by their link, and it records no screens.

    European Union (PostHog's EU cloud).

  • Vizard

    Cuts a long video answer into short clips. Receives the video of the person speaking, and keeps its own copy of the source and of every clip until the project is deleted.

    United States.

  • Zernio (ARBICHAT, S.L., Spain)

    Posts to LinkedIn and other networks for teams that connect an account, at the time they choose, after someone on the team has approved the post's exact words. Receives those words, the pictures, video or document chosen to go with them, and the connection to the account it posts to. Not used by teams that do not connect an account.

    United Kingdom (London) for its database and processing; media stored in Western Europe. A few of Zernio's own providers are elsewhere, covered by the EU-US Data Privacy Framework or Standard Contractual Clauses (zernio.com/subprocessors).

Open-source software

Recordings are converted to MP3 in your own browser using LAME (lamejs), used unmodified under the GNU Lesser General Public Licence. Your audio is not sent anywhere to be converted. LAME: lame.sourceforge.net.

We will publish a change here before adding a new subprocessor.