Subprocessors
Last updated: October 8, 2026
These are the service providers ("subprocessors") that Project Aeon Inc uses to run the hosted Joshu Services. Each provider receives only the information it needs to do its job for us, and may use it only to provide that service. Our Privacy Policy explains how we use and protect your information.
We choose providers whose terms for our use do not allow them to train their AI models on your Content, and we turn off data-sharing options where a provider offers them. When you cancel your account, we delete your Content at these providers, as described in the Privacy Policy.
If you self-host Joshu, none of these providers apply unless you choose to use them with your own keys.
Hosting and infrastructure
| Provider | What it does for Joshu | Information it receives |
|---|---|---|
| DigitalOcean | Hosts owner boxes in the United States | Everything stored in your box |
| Hetzner | Hosts owner boxes in the United States | Everything stored in your box |
| Vercel | Hosts joshu.me, the account portal, and our control plane, which relays some box requests to other providers on this list | Account information; Content in requests that pass through the relay |
| Supabase | Account sign-in and account database | Account information |
| Inngest | Runs background jobs for account and box management | Account information and job details |
| Cloudflare | DNS for box addresses | Box hostnames only; no Content |
AI models
| Provider | What it does for Joshu | Information it receives |
|---|---|---|
| OpenRouter | Routes the assistant's model requests to model providers, only to providers that do not train on requests | Content in model requests |
| Model providers reached through OpenRouter | Generate the assistant's responses; the provider depends on the model in use | Content in model requests |
| Google (Gemini API) | Language models, and search over the assistant's memory | Content in model requests |
| OpenAI | Speech-to-text and text-to-speech for phone calls (default voice provider) | Call audio and text |
| ElevenLabs | Text-to-speech for the assistant's voice, when enabled | Text that the assistant speaks |
Tools the assistant uses
| Provider | What it does for Joshu | Information it receives |
|---|---|---|
| Browser Use | Cloud web browser for web tasks | Task instructions and the web pages visited |
| Exa | Web search | Search queries |
| fal.ai | Image and media generation | Prompts and media |
| ScrapeCreators | Public social media lookups | Search queries |
| Xquik | Public X (Twitter) lookups | Search queries |
Communications and connected accounts
| Provider | What it does for Joshu | Information it receives |
|---|---|---|
| Twilio | Your box's phone number, text messages, and calls | Phone numbers, messages, and call audio |
| Nylas | Your box's email address and mailbox | Email sent to and from your box |
| Composio | Connections to apps that you authorize, such as email, calendar, and business tools | Access tokens and data from the apps that you connect |
| SendGrid | Account emails from Joshu, such as sign-up and billing notices | Email address and account notices |
Monitoring, analytics, and payments
| Provider | What it does for Joshu | Information it receives |
|---|---|---|
| Langfuse | Traces of the assistant's steps, for fixing failures and quality review; deleted after 30 days | Content in traces |
| Google Analytics | Usage analytics for joshu.me and the account portal; does not run in your box | Usage data |
| Hotjar | Usage analytics for joshu.me and the account portal; does not run in your box | Usage data |
| Stripe | Payments and billing | Billing information |
Changes to this list
We update this page when we add or replace a provider. Questions: [email protected].