Legal Hub
Agreements, policies, and information about how we operate and protect your data.
Subprocessor List
Effective Date: March 8, 2026
This Subprocessor List identifies third-party subprocessors that Spenat Labs Inc. (d/b/a Walk and Code) (“Walk and Code”) may use to process customer data and personal data on behalf of customers in connection with the Walk and Code services.
This list is provided for transparency and may be updated from time to time as our services, vendors, infrastructure, and operations evolve. Use of a vendor in a category below does not mean that every vendor is used for every customer or every feature.
Important Note
This list is based on the vendor information currently provided to us and should be reviewed periodically to ensure it remains accurate as your stack evolves.
How to Read This List
For each subprocessor, we generally identify:
- the subprocessor name;
- the service or processing purpose;
- the category of data involved; and
- the primary processing location, if known.
Current Subprocessors
1. Cloud Hosting and Infrastructure
| Subprocessor | Purpose | Categories of Data Processed | Primary Processing Location |
|---|---|---|---|
| Amazon Web Services, Inc. (AWS) | Cloud hosting, compute, storage, networking, backups, infrastructure operations, database hosting | Account data, code, repositories, prompts, chats, recordings, transcripts, logs, metadata, usage data, support data | United States / other regions as configured |
| Vercel Inc. | Web application hosting, deployment, edge delivery, performance, frontend infrastructure | Account data, application data, logs, metadata, usage data, support data | United States / global |
2. Database and Storage Providers
| Subprocessor | Purpose | Categories of Data Processed | Primary Processing Location |
|---|---|---|---|
| Amazon Web Services, Inc. (AWS) | Data storage, object storage, backups, operational storage | Account data, code, prompts, chats, recordings, transcripts, logs, metadata, usage data | United States / other regions as configured |
| Amazon DynamoDB (via AWS) | Managed database services | Account data, metadata, prompts, chats, transcripts, logs, usage data, operational records | United States / other regions as configured |
3. AI / Model Providers
| Subprocessor | Purpose | Categories of Data Processed | Primary Processing Location |
|---|---|---|---|
| OpenAI, L.L.C. / affiliates | AI model inference, generation, coding assistance, prompt and output processing, audio processing | Prompts, chats, instructions, code, repository content, transcripts, metadata, outputs, audio inputs | United States / as provided by vendor |
| Anthropic, PBC | AI model inference, coding assistance, prompt and output processing | Prompts, chats, instructions, code, repository content, transcripts, metadata, outputs | United States / as provided by vendor |
| Moonshot AI (Kimi) | AI model inference, generation, coding assistance, prompt and output processing | Prompts, chats, instructions, code, repository content, transcripts, metadata, outputs | As provided by vendor |
| Meta Platforms, Inc. / affiliates | AI model access, inference, generation, and related processing where used through hosted offerings or integrations | Prompts, chats, instructions, code, repository content, transcripts, metadata, outputs | As provided by vendor |
| xAI | AI model inference, generation, coding assistance, prompt and output processing | Prompts, chats, instructions, code, repository content, transcripts, metadata, outputs | As provided by vendor |
| DeepSeek | AI model inference, generation, coding assistance, prompt and output processing | Prompts, chats, instructions, code, repository content, transcripts, metadata, outputs | As provided by vendor |
| Google LLC / Google Cloud | AI model inference, speech processing, transcription, and related AI services | Prompts, chats, instructions, code, repository content, transcripts, metadata, outputs, audio inputs | United States / global / as provided by vendor |
| Other AI and model providers engaged by Walk and Code from time to time | AI model inference, generation, ranking, routing, multimodal processing, coding assistance, and related features | Prompts, chats, instructions, code, repository content, transcripts, metadata, outputs, audio inputs | As provided by vendor |
4. Voice, Audio, and Transcription Providers
| Subprocessor | Purpose | Categories of Data Processed | Primary Processing Location |
|---|---|---|---|
| Soniox Inc. | Speech-to-text and transcription services | Microphone recordings, transcripts, session metadata, audio-derived data | As provided by vendor |
| ElevenLabs, Inc. | Text-to-speech, voice synthesis, voice generation, audio processing | Text inputs, generated outputs, audio data, session metadata | As provided by vendor |
| Deepgram, Inc. | Speech-to-text, transcription, audio intelligence | Microphone recordings, transcripts, session metadata, audio-derived data | As provided by vendor |
| AssemblyAI, Inc. | Speech-to-text, transcription, audio analysis | Microphone recordings, transcripts, session metadata, audio-derived data | As provided by vendor |
| OpenAI, L.L.C. / affiliates | Audio processing, speech-to-text, text-to-speech, multimodal processing | Microphone recordings, transcripts, prompts, outputs, metadata | United States / as provided by vendor |
| Google LLC / Google Cloud | Audio processing, speech-to-text, text-to-speech, related AI services | Microphone recordings, transcripts, prompts, outputs, metadata | United States / global / as provided by vendor |
| Other voice, speech, and transcription vendors | Voice processing, speech recognition, synthesis, transcription, audio analytics | Microphone recordings, transcripts, prompts, outputs, metadata | As provided by vendor |
5. Authentication and Identity Providers
| Subprocessor | Purpose | Categories of Data Processed | Primary Processing Location |
|---|---|---|---|
| Amazon Cognito (via AWS) | User authentication, login, account access, identity and session management | Name, email, account identifiers, login/session data, authentication metadata | United States / other regions as configured |
6. Payments and Billing
| Subprocessor | Purpose | Categories of Data Processed | Primary Processing Location |
|---|---|---|---|
| Stripe, Inc. | Payment processing, subscriptions, invoicing, billing operations, fraud prevention | Billing data, payment metadata, subscription data, transaction history, customer contact data | United States / global |
7. Analytics, Session Replay, Error Monitoring, and Observability
| Subprocessor | Purpose | Categories of Data Processed | Primary Processing Location |
|---|---|---|---|
| Better Stack, Inc. / Better Uptime | Logging, uptime monitoring, observability, incident monitoring | Logs, metadata, uptime and infrastructure data, limited diagnostic data | As provided by vendor |
| Sentry (Functional Software, Inc.) | Error tracking, performance monitoring, debugging | Logs, device/browser info, usage metadata, crash/performance diagnostics, limited content in error traces | United States / as provided by vendor |
| Datadog, Inc. | Infrastructure monitoring, observability, logging, performance and security monitoring | Logs, usage metadata, infrastructure data, diagnostic information | United States / global |
| PostHog, Inc. | Product analytics, event tracking, feature usage, session analysis | Device data, usage data, clicks, session data, metadata, IP address, diagnostic data | United States / EU / as configured |
| Mixpanel, Inc. | Product analytics, behavioral analytics, retention and engagement measurement | Device data, usage data, clicks, session data, metadata, IP address, diagnostic data | United States / global |
| Amplitude, Inc. | Product analytics, event measurement, feature adoption analysis | Device data, usage data, clicks, session data, metadata, IP address, diagnostic data | United States / global |
8. Communications, Transactional Email, and Customer Support
| Subprocessor | Purpose | Categories of Data Processed | Primary Processing Location |
|---|---|---|---|
| Resend, Inc. | Transactional email, onboarding emails, product notices, service communications | Name, email, message metadata, communication history | As provided by vendor |
| Zendesk, Inc. | Customer support, support ticketing, issue resolution, customer communications | Name, email, support communications, account metadata, troubleshooting data | United States / global |
| SendGrid, Inc. / Twilio | Transactional and support-related email delivery | Name, email, message metadata, communication history | United States / global |
9. Repository and Integration Providers
| Subprocessor | Purpose | Categories of Data Processed | Primary Processing Location |
|---|---|---|---|
| GitHub, Inc. / Microsoft | Repository integration, code access, workflow integration, metadata sync | Repository metadata, code, diffs, commits, access tokens, integration metadata | United States / global |
Customer Data Categories Potentially Processed by Subprocessors
Depending on the feature used and vendor involved, subprocessors may process some or all of the following:
- account and contact information;
- billing and subscription information;
- prompts, chats, instructions, and outputs;
- source code, repositories, diffs, files, logs, and configurations;
- microphone recordings, transcripts, and related metadata;
- device information, IP addresses, session data, and usage analytics;
- support requests and communications; and
- operational, security, debugging, and diagnostic data.
Geographic Processing
Customer data may be processed in the United States and in other jurisdictions where Walk and Code or its subprocessors operate or maintain infrastructure. Exact locations may vary depending on product configuration, vendor architecture, routing, and customer settings.
How We Update This List
We may update this Subprocessor List from time to time to reflect changes to our vendors, infrastructure, product features, or operations. Updated versions become effective when posted or otherwise made available, unless we state otherwise.
Contact
If you have questions about this Subprocessor List, contact:
Spenat Labs Inc. (d/b/a Walk and Code)
Email: hello@walkandcode.com