Companies / TheySaid / Subprocessors
TheySaid provides user testing, surveys, and feedback tools that run inside design and development tools like Claude, v0, Replit, Cursor, and Lovable. It serves UX researchers, designers, and product managers.
Summarized from its homepage on 5 Nov 2026.
Subprocessors of TheySaid
TheySaid declares 14 subprocessors, including AI providers Anthropic, AssemblyAI, ElevenLabs, OpenAI.
| Subprocessor | Purpose |
|---|---|
| LLM inference for text generation, redaction and processing (Claude API — primary) | |
| Appetize.io LLC | Cloud-hosted simulated mobile devices for mobile app user tests: runs customer-uploaded app builds and streams them to participants’ browsers. Processes data only when the customer runs a mobile app test. |
| AI speech-to-text transcription of audio/video survey responses | |
| Web Unlocker and proxy network: crawl fallback when standard crawling is blocked, and proxy routing for AI-tester browser sessions and other platform features that access Customer-supplied URLs | |
| Outbound text-to-speech synthesis — converts AI-generated survey questions and conversational responses (which may include respondent name) to spoken audio. No raw survey responses or session identifiers transmitted. | |
| Hosted web crawling and content extraction from URLs supplied by Customer, used in AI-tester, content import and analysis features | |
| Data services, hosting (GKE, AlloyDB, Vertex AI, Cloud Logging, Cloud Storage, Cloud Speech-to-Text), LLM inference (Gemini API — one active flow) | |
| Inworld (Theai, Inc.) | Text-to-speech synthesis for AI moderator questions and AI-tester narration, including custom moderator voices cloned from voice samples uploaded by the customer. |
| LLM inference for text generation (GPT API — fallback) | |
| Product analytics, feature flags and masked session recordings (consent-gated) |
4 more subprocessors
See the full list with purpose, location and first seen date.
Create a free accountWork email, no card. Already have one? Log inQuestions about TheySaid
Certifications
| Standard | What the source says | Checked |
|---|---|---|
| SOC 2Company's statement | “TheySaid is SOC 2 and GDPR compliant, and you control what customer data AI can see and act on.”The company's own statement. SOC 2 has no public registry; the report itself is shared by the company, usually under NDA. | 12 Nov 2026Source |
We last read its homepage on 12 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean TheySaid lacks it.
Recent changes
| Date | Change |
|---|---|
| 12 Nov 2026 | changed ElevenLabs |
| 12 Nov 2026 | added Bright Data |
| 12 Nov 2026 | added Firecrawl |
| 12 Nov 2026 | added Inworld (Theai, Inc.) |
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.
See TheySaid's full stack
Every vendor with its source and date, and an alert when TheySaid adds or drops one. The same lookup works for any company.
- Every company and vendor, with its public source
- 100 API calls a month, plus MCP and the Chrome extension
- Work email only. No card, no sales call