Subprocessors
Effective October 6, 2026.
These companies process customer data for Wavelength. We tell you before we add a new subprocessor. We post the change on this page at least 30 days before it starts, except when an urgent security or service need prevents this.
| Subprocessor | What it does for Wavelength | Customer data it handles | Location | Security reports |
|---|---|---|---|---|
| Supabase | Database and server functions | Flows, transcripts, diagrams, account profile, usage counts | United States (us-east-1) | SOC 2 Type II |
| Base44 (part of Wix.com) | App hosting, sign-in, transactional email, and AI summaries of a flow (recap email, statement of work outline) | Name, email, sign-in sessions, app traffic, and the flow content that you ask it to summarize | United States | SOC 2 Type II, ISO 27001 |
| Groq | AI speech-to-text, image reading, and diagram generation | Audio clips, transcript text, and frames from screen recordings or photos that you upload, during processing | See Groq trust center | SOC 2 Type II |
| Stripe | Payments and billing | Name, email, billing details | See Stripe | PCI Level 1, SOC 2 Type II |
| Resend | Account and product email | Name, email address | See Resend | SOC 2 Type II |
| Cloudflare | Domain name service (DNS) and email routing | Email messages sent to our support address | See Cloudflare | SOC 2, ISO 27001 |
| Website analytics (Google Analytics) and feedback forms (Google Forms) | Site usage data, feedback that you choose to send | See Google | See Google |
Integrations that you turn on
- If you connect your CRM (for example HubSpot), Wavelength sends the flows that you choose to that CRM. You control this connection. You can disconnect it at any time.
Last updated: October 6, 2026