Sub-processors

Last updated: August 6, 2026

Transistor uses a small number of third-party service providers to deliver the Services. This page lists the Sub-processors that may process Personal Data on behalf of our customers, as required by our Data Processing Agreement.

We update this page before a new Sub-processor begins processing Personal Data, so that you have an opportunity to object. If you would like to be told when this page changes, write to mail@transistor.fm.

Transistor is established in the United States. Personal Data transferred to Transistor from the EEA, UK, or Switzerland is transferred under the Standard Contractual Clauses incorporated into our DPA. Each Sub-processor below is bound by written data protection terms no less protective than that DPA.

Infrastructure and hosting

Sub-processor Purpose Location Onward transfer basis
Amazon Web Services, Inc. Application hosting; RDS PostgreSQL database storing account and podcast data United States EU-U.S. DPF, UK Extension, and Swiss-U.S. DPF certified; SCCs in vendor DPA
Cloudflare, Inc. CDN, DNS, DDoS protection, and R2 object storage for podcast media United States and global edge network EU-U.S. DPF, UK Extension, and Swiss-U.S. DPF certified; SCCs in vendor DPA
DigitalOcean, LLC Object storage (Spaces) for static assets and images United States EU-U.S. DPF, UK Extension, and Swiss-U.S. DPF certified; SCCs in vendor DPA

Payments

Sub-processor Purpose Location Onward transfer basis
Stripe, Inc. Payment processing, subscription billing, and fraud prevention. Card data is handled by Stripe and never stored on Transistor servers. United States, Ireland EU-U.S. DPF, UK Extension, and Swiss-U.S. DPF certified; SCCs in vendor DPA

Product and communications

Sub-processor Purpose Location Onward transfer basis
Twilio Inc. (SendGrid) Sending transactional and account email United States EU-U.S. DPF, UK Extension, and Swiss-U.S. DPF certified; SCCs in vendor DPA
Userlist, Inc. Sending onboarding messages United States SCCs in vendor DPA
Crisp IM SAS Customer support ticketing and conversation history France (EU) Within EEA — no transfer
Deepgram, Inc. AI transcription of uploaded audio and video United States SCCs in vendor DPA
Conva Ventures Inc. (Fathom Analytics) Product usage analytics Canada Adequacy decision (Canada)
Honeybadger Industries LLC Error and crash monitoring United States SCCs in vendor DPA
iubenda s.r.l. Hosting of privacy policy and cookie consent management on transistor.fm Italy (EU) Within EEA — no transfer

Notes

  • Distribution platforms are not Sub-processors. When you publish a podcast, your RSS feed and media files are retrieved by directories and apps such as Apple Podcasts, Spotify, YouTube, and Amazon Music. Those platforms act as independent controllers with respect to any data they collect from their own users. Transistor does not control and is not responsible for their processing.

  • Dynamic ad insertion. Where you enable dynamic ads through a third-party ad platform, that platform's processing of listener data is governed by your agreement with it, not by this list.