Legal
Subprocessors
Last updated: 29 October 2026
Koala For Work Ltd uses the companies below to process personal data when we run Koala. Each is bound by a written contract with data protection duties at least as strong as our data processing agreement.
Current subprocessors
| Company | Purpose | Data involved | Location |
|---|---|---|---|
| Supabase | Database, sign-in, file storage, backups and application servers | Account details and everything you keep in Koala | United Kingdom (London) |
| Vercel | Hosting the Koala app and website | Technical data your browser sends, such as IP address and pages requested | United States |
| Anthropic | AI features: planning, suggestions and answers | The content a feature needs, such as task details | Stored in the United States. Processing can run in other countries where Anthropic has capacity |
| OpenAI | Turning voice input into text, only if you use it | Voice recordings and their transcripts | United States |
| Resend | Sending service emails, such as sign-in codes and weekly briefs | Name, email address and the content of the email | United States |
| Mixpanel | Product analytics | Feature usage linked to a random account ID | European Union |
| Notion | Storing the feedback you send from inside Koala | Name, email address and your feedback | United States |
| Google Workspace | Our email, including messages you send to our support address | Name, email address and what you write to us | United States and other countries where Google has data centres |
Where data leaves the UK, it is protected by the UK’s approved transfer safeguards, such as the UK International Data Transfer Agreement.
Koala does not store or use your data for training. We use it only for what Koala needs to work, and our AI providers do not use it to train their models. Each provider receives only what a feature needs.
Payments
Stripe takes payments and manages subscriptions under its own privacy policy. It never sees what you keep in Koala.
Services you connect
Google, Microsoft, Notion and Granola accounts you choose to connect are your own services, not our subprocessors. Koala reads from them only with the permission you give.
Changes
We give business customers at least 14 days’ notice before we add or replace a subprocessor. The date at the top shows when this list last changed. To get an email when it changes, write to hello@koalaforwork.com.