Legal
Third-Party Providers
Last updated: 12th October 2026
1. About this list
This page is part of our Privacy Policy. It lists the third-party providers that process personal data on Dwel's behalf, what each one does, where it processes data, and the safeguards we rely on where data leaves the UK or EEA.
It covers providers that process Visitor Data (for example, the conversation content of a Guide) and platform user data (for example, sign-in details). Providers that process personal data contained in Customer Content are listed in Annex 2 of our Data Processing Agreement, which is the contractual list for that data. The hosting providers below also process Customer Content and are repeated in that Annex.
2. Providers
| Provider | Purpose | Region | Safeguard |
|---|---|---|---|
| Amazon Web Services | Hosting of Dwel's backend services and cache; AI response generation and content indexing (Amazon Bedrock) | UK (London, eu-west-2) | None needed (UK region) |
| Supabase | Database and file storage for Customer Content; account login | UK (London, eu-west-2) | EU adequacy for the hosting itself, plus the transfer clauses in its DPA |
| Vercel | Hosting of the Customer dashboard and the visitor guide web app | Washington DC (US) | UK Extension to the EU-US Data Privacy Framework where certified, otherwise the UK Addendum or IDTA in its DPA |
| ElevenLabs | Speech-to-text: turning a visitor's spoken questions into text | United States | UK Extension to the EU-US Data Privacy Framework |
| Grafana Labs (Grafana Cloud) | Service monitoring and error reporting for Dwel's apps and backend | UK (London) | Data is stored in the UK, so storage involves no transfer. Any access by Grafana's US team is covered by the UK Extension to the EU-US Data Privacy Framework. |
| Stripe | Processing visitor payments and Customer Pro and Subscription fees | UK (Stripe Payments UK Ltd), with transfers to Stripe, LLC in the US | UK Extension to the EU-US Data Privacy Framework |
| Resend | Sending emails: sign-in links, team invitations, website enquiries and updates | EU (Ireland) | UK adequacy regulations for the EEA. Any access by Resend's US team is covered by the UK Extension to the EU-US Data Privacy Framework. |
| "Sign in with Google" for platform user accounts | United States / global | UK Extension to the EU-US Data Privacy Framework |
3. Questions
Questions about this list: privacy@dwel.ai.
End of Third-Party Providers.