Trust Center
Tiro
Security isn't a feature. It's how we operate.
Tiro is an AI meeting assistant, built for security from day one. Explore our certifications, controls, and policies — and request the documents your security team needs.
Subprocessors
Third-party services Tiro relies on to operate. All LLM and speech-to-text partners are bound by DPAs that prohibit training and require Zero Data Retention.
As of July 25, 2026
All LLM and speech-to-text providers operate under Zero-Data-Retention contracts and are contractually prohibited from training on your data.
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Infrastructure | Encrypted data at rest (all categories) | Korea |
| Cloudflare | CDN / TLS termination | Traffic in transit (TLS termination, WAF/DDoS edge) | Global |
| Azure OpenAI | LLM provider | Transcript & prompt text — ZDR, no training | Global |
| Anthropic (Claude) | LLM provider | Transcript & prompt text — ZDR, no training | Global |
| Google Vertex AI / Gemini | LLM provider | Transcript & prompt text — ZDR, no training | Global |
| AWS Bedrock | LLM provider | Transcript & prompt text — ZDR, no training | Global |
| Deepgram | Speech-to-text | Meeting audio for transcription — ZDR | Global |
| AssemblyAI | Speech-to-text | Meeting audio for transcription — ZDR | Global |
| ElevenLabs | Speech-to-text | Meeting audio for transcription — ZDR | Global |
| NAVER Cloud (Clova) | Speech-to-text | Meeting audio for transcription — ZDR | Korea |
| Google Speech-to-Text | Speech-to-text | Meeting audio for transcription — ZDR | Global |
| Stripe | Payments | Billing details; card data is handled by PCI-DSS Level 1 processors and never stored by Tiro | Global |
| RevenueCat | Payments | Billing details; card data is handled by PCI-DSS Level 1 processors and never stored by Tiro | Global |
| SendGrid | Email delivery | Email address & message content | Global |
| WorkOS | SSO / identity | Authentication identifiers (email, directory IDs) for enterprise SSO | Global |
| Datadog | Observability | Operational logs and traces (PII redacted) | Global |
| Sentry | Error monitoring | Error events and stack traces (PII redacted) | Global |
We update this list as our services evolve.