OmniLink Subprocessors
Last updated: 2026-05-27
OmniLink Interpretation (“OmniLink”) engages the third-party subprocessors below to provide the service. For customer data, OmniLink acts as a processor / business associate and the customer is the controller / covered entity. We require a Data Processing Agreement (DPA) with every subprocessor, and — for workspaces handling Protected Health Information (PHI) — a Business Associate Agreement (BAA) with every subprocessor in the PHI path before that workspace goes live (see “Healthcare / PHI” below). All listed subprocessors process data in the United States.
We notify customers of any new or replacement subprocessor before it begins processing customer data, with a reasonable opportunity to object.
Current subprocessors
| Subprocessor | Service / purpose | Data processed | Processing location | Safeguards |
|---|---|---|---|---|
| Supabase (hosted on AWS) | Primary database, authentication, file storage, and serverless (edge) functions | Account + workspace data, session transcripts, AI notes, consent records, and encrypted session audio (retained only for the active engagement) | United States — AWS us-west-2 | DPA; SOC 2; encryption in transit and at rest; credentials app-encrypted; HIPAA-eligible configuration + BAA for PHI |
| Anthropic (Claude) | Real-time translation and AI note generation/verification | Session transcript text submitted for translation/summarization | United States | DPA; commercial API zero-retention and no-training-on-customer-data terms; BAA for PHI |
| ElevenLabs | Speech-to-text (Scribe) and text-to-speech (Flash) for live interpretation | Session audio and transcript text | United States | DPA; zero-retention configuration; BAA for PHI |
| RingCentral | Telephony for phone-channel sessions (placing/connecting calls) | Call audio transport and call metadata for phone sessions | United States | DPA; SOC 2 / HITRUST; BAA available |
| Amazon Web Services (AWS) | Application hosting, CDN, and underlying infrastructure | Application delivery; hosts the Supabase infrastructure above | United States | DPA; SOC 2; encryption |
Customer-configured delivery destinations (for example, your own Amazon S3 bucket or SharePoint site to which a finalized session record is delivered) are operated by the customer, under the customer’s control, and are not OmniLink subprocessors.
Healthcare / PHI
OmniLink’s non-healthcare industries (legal, staffing, manufacturing) launch first. Healthcare workspaces go live only after a signed BAA is in place with every subprocessor in the PHI path (Anthropic, ElevenLabs, Supabase, RingCentral, and any storage subprocessor) and the applicable Section 1557 language-access materials are available.
Data residency
OmniLink is configured to keep customer data processing within the United States.
The primary data store (Supabase) runs in AWS us-west-2. Each AI/telephony
subprocessor is engaged on US processing terms.
Contact
Questions about this list, or to receive subprocessor-change notifications: privacy@interfaceomnilink.com
Questions? Email cneira@interfaceomnilink.com.