People Tech Revolution Legal

Subprocessors and Data Locations

Document ID
PTR-SUBPROCESSORS
Version
0.2.00
Status
published
Effective date
2026-08-24
Last updated
2026-08-24
SHA-256
7fe43445991969ad3c4677762af4278e9e35725ce9b32801f9d49dcd8ce08c21
Canonical URL
https://legal.peopletechrevolution.com/subprocessors

This register records the categories of service provider People Tech Revolution Pty Ltd relies on to run its products: what each category does, the kinds of information it handles, where that processing may take place, and whether it involves customer content.

It is a register of categories, not a list of company names. Our product architecture is still changing, and a published list of company names would be out of date faster than it could be republished. What is published here is the part a reader can rely on and hold us to: the function performed, the information involved, and the location or region class.

This register does not promise a permanently complete list of every company we deal with, and it should not be read as one. If you need the identity of the providers engaged for a particular product, for a procurement, due-diligence or regulatory assessment, ask us using the Contact section below.

How to read this register

Provider category describes what kind of service the provider supplies. It is not a company name.

Customer content means material a person or organisation submits to a product or generates in it: uploaded documents, images, voice samples, recorded audio and video, messages, and the outputs generated from them. Account details, contact details, request metadata and system logs are personal information but are not customer content, and the table distinguishes the two.

Processing location or region class is what we have actually established, not what we would prefer. Where a cell says a location is not established, it means we have checked and the running configuration does not establish one, and we are not supplying a likely answer in its place.

Last verified is the date the row was checked against the production configuration that was running, and against the code that makes the call, rather than against a plan, a design document or a supplier's marketing page.

The register

Provider categoryPurpose or processing functionInformation processedProcessing location or region classProcesses customer contentApplies toLast verifiedHow changes are notified
Cloud infrastructure and application hostingRuns our applications and stores their data: compute, container images, object storage, secret storage, logging and monitoringEverything our products hold, including account records, uploaded documents and media, generated outputs and system logsAustralia. Deployed in an Australian regionYesAll PTR and Didymo products2026-08-24New dated version of this register; material changes also noticed under the Privacy Policy
Managed application databaseStores workspace, account, session, lead and consent recordsAccount and workspace records, conversation and session records, lead records, consent recordsAustraliaYesDidymo, PTR Labs, PTR AI Studio, PTR Admin2026-08-24New dated version of this register; material changes also noticed under the Privacy Policy
Web hosting and content delivery edgeServes our web pages and static files and caches them at network edgesRequest metadata: IP address, user agent, requested addressOrigin in Australia. The caching edge is operated outside Australia; on the verification date our sites were served from a point of presence in the United StatesNo. Request metadata onlyAll PTR and Didymo websites, including this one2026-08-24New dated version of this register; material changes also noticed under the Privacy Policy
Identity and authenticationCreates and verifies sign-in credentials and sessionsAccount identifier, email address, sign-in method, sign-in historyNot established. This service is not pinned to a region by our configuration and the provider does not expose one to usNoDidymo application and portal2026-08-24New dated version of this register; material changes also noticed under the Privacy Policy
Generative AI text model serviceGenerates and analyses text for conversational and assistant featuresPrompts, excerpts retrieved from workspace knowledge, persona text, and the generated repliesAustralia. Requests are sent to an Australian regional endpointYesDidymo, PTR Labs, PTR AI Studio2026-08-24New dated version of this register; material changes also noticed under the Privacy Policy
Speech to textConverts recorded speech into textRecorded speech audio and the returned transcriptSplit as at the verification date. Didymo sends this to an Australian regional endpoint. PTR Labs and PTR AI Studio send it to a global endpoint that is not pinned to a regionYesDidymo dictation, PTR Labs, PTR AI Studio2026-08-24New dated version of this register; material changes also noticed under the Privacy Policy
Text to speechGenerates spoken audio from text the product suppliesReply text submitted for synthesis and the returned audioGlobal endpoint that is not pinned to a regionYesPTR Labs, PTR AI Studio2026-08-24New dated version of this register; material changes also noticed under the Privacy Policy
Voice cloning and synthesis from a supplied sampleCreates a synthetic voice from a supplied voice sample and synthesises speech in itThe uploaded voice sample of an identifiable person, the resulting voice identifier, and reply text submitted for synthesisOutside Australia. The provider publishes no region split for this service, so no more precise location is establishedYesDidymo voice features2026-08-24New dated version of this register; material changes also noticed under the Privacy Policy
Real-time avatar generation and live conversational mediaGenerates a speaking avatar and carries the live audio and video of a callThe consented reference photograph, live microphone audio and camera video from the participant's browser, the persona prompt, the transcript, and any recordingOutside Australia. The provider publishes no region split for this service, so no more precise location is establishedYesDidymo live twin calls2026-08-24New dated version of this register; material changes also noticed under the Privacy Policy
Customer-authorised file storage and workplace identity connectorsLets a customer grant access to their own document storage so that files they select can be imported into a workspaceThe authorisation grant, basic profile identity from the connected account, and the contents of the files the customer selectsNot established. These are global provider endpoints and no processing region is exposed to usYesDidymo knowledge connections2026-08-24Named in the product at the point of connection, and by a new dated version of this register
Business email deliverySends enquiry and notification email from our forms and servicesSender name, email address, phone number, organisation, and the message textNot established. No processing region is exposed for this serviceYes. A message the sender writes is their own contentPTR website contact form, Didymo enquiry forms2026-08-24New dated version of this register; material changes also noticed under the Privacy Policy
Spreadsheet-based internal customer and reporting recordsHolds our internal customer-relationship and reporting recordsContact and lead records, and internal commercial recordsNot established. No processing region is exposed for this serviceNo. Contact and commercial records onlyPTR Admin2026-08-24New dated version of this register; material changes also noticed under the Privacy Policy
Authoritative DNSAnswers domain-name lookups for our domains. Web traffic itself does not pass through this providerLookup metadata, such as the address of the resolver and the name requestedDistributed anycast network. Not established for any individual lookupNoAll PTR and Didymo domains2026-08-24New dated version of this register; material changes also noticed under the Privacy Policy
Automated abuse and bot challengePresents a challenge that distinguishes automated traffic from a personThe visitor's IP address and a challenge tokenDistributed edge network. Not establishedNoDidymo public twin pages and enquiry forms2026-08-24New dated version of this register; material changes also noticed under the Privacy Policy
E-commerce platform and store hostingRuns our online store and holds its product catalogue and order recordsOrder records, billing name and email address, order line itemsNot established. The hosting account has not been verified for this registerNo. Order and billing records onlyThe PTR online store2026-08-24New dated version of this register; material changes also noticed under the Privacy Policy
Payment processing for the online storeTakes payment for orders placed in the online storePayment and billing details submitted at checkoutNot established. The gateway is configured inside the store platform rather than in our own systems and has not been verified for this registerNoThe PTR online store2026-08-24New dated version of this register; material changes also noticed under the Privacy Policy
Public JavaScript delivery networksServe third-party JavaScript libraries used by some of our public web pagesVisitor IP address, user agent and referring page at the moment a file is fetchedDistributed edge networks. Not establishedNoThe PTR corporate website and its support widget2026-08-24New dated version of this register; material changes also noticed under the Privacy Policy
Web font deliveryServes the typefaces some of our pages useVisitor IP address and user agent at the moment a font is fetchedDistributed edge network. Not establishedNoPTR Labs, PTR AI Studio and PTR Admin web pages2026-08-24New dated version of this register; material changes also noticed under the Privacy Policy
Source-code hosting and build pipeline control planeHolds our source code and coordinates our build and deployment pipelineSource code, build logs and workflow metadata. Not customer recordsProvider control plane, not established. The build jobs themselves run on machines PTR operates in AustraliaNoEngineering infrastructure for all products2026-08-24New dated version of this register; material changes also noticed under the Privacy Policy

What this register does not record

The identity of individual companies. See the opening of this document. Ask us if you need it for an assessment.

Contractual position. This register records what each category of provider does and where. It does not record the contractual terms agreed with any individual provider, including data-protection agreements and restrictions on how a provider may use information. Those are handled provider by provider and are not published here. Ask us if you need the position for a specific provider.

Integrations that are not switched on. Our code contains integrations that are not enabled in production. They are deliberately absent from the table, because listing a provider we do not currently call would describe a capability the platform does not have. As at the last verification date, no payment provider is engaged inside the Didymo product itself; the payment row above covers the PTR online store only.

Providers used purely for internal business administration that do not process information from our products.

How we verify this register

Each row was checked against the production configuration that was actually running on its Last verified date, and against the code that makes the call, rather than against an architecture document. Where the running configuration did not establish a fact, the row says so instead of supplying a plausible answer.

Rows are re-verified when a category changes and on periodic review. The Last verified date on each row is the date of the check that supports that row, and it is the only date a reader should rely on for it.

How changes are notified

This register is versioned like every other document we publish. It carries a document identifier, a version, an effective date and a SHA-256 of its text, and a new version replaces the old one at the same address. The machine-readable registry of every document and version is published alongside it.

A change to a category, to what that category does, to the information it handles, to whether it handles customer content, or to its location or region class, produces a new version of this register with a new effective date.

Adding or removing an individual company inside an existing category does not by itself produce a new version, because this register does not name individual companies. That is a consequence of publishing categories rather than names, and it is stated here rather than left for a reader to discover.

Where a change is material to the way we handle personal information, notice is also given under the Changes section of the Privacy Policy.

Where a customer connects their own third-party service to a product, that service is named to them in the product at the point of connection, whether or not it appears here.

Contact

People Tech Revolution Pty Ltd
ABN 66 646 534 858
Address: 27/65 Manooka Drive, Cannonvale, Queensland 4802, Australia
Privacy email: privacy@peopletechrevolution.com

To ask which providers are engaged for a particular product, or for the provider information a procurement or regulatory assessment needs, write to that address.