Service Inventory

This page is backed by the same inventory used for public subprocessor disclosures and internal deployment review. It covers the services currently wired into the product codebase, the data they touch, and the environment variables or rollout notes needed to review them responsibly.

Last updated: April 25, 2026

Tracked services

17

Always on

2

Feature-conditional

15

InsForge

Core platformAlways on

Application database, authentication, storage, and server-side functions

LegalOpsDeployment

Data involved

Account details, session data, transcripts, summaries, usage records, private files

When used

Core platform for every workspace

Deployment variables

NEXT_PUBLIC_INSFORGE_URL, NEXT_PUBLIC_INSFORGE_ANON_KEY, INSFORGE_SERVICE_ROLE_KEY, INSFORGE_API_KEY, INSFORGE_BASE_URL, INSFORGE_ANON_KEY

Review note

Required in every environment because auth, database access, storage, and edge functions depend on it.

Vercel

Hosting and deliveryAlways on

Hosting, edge delivery, cron execution, and deployment infrastructure

LegalOpsDeployment

Data involved

Application traffic, request metadata, deployment and runtime logs

When used

Core website and API delivery

Deployment variables

NEXT_PUBLIC_APP_URL, NEXT_PUBLIC_ROOT_DOMAIN, NEXT_PUBLIC_API_URL, NEXT_PUBLIC_PORTAL_URL, CRON_SECRET

Review note

Primary deployment surface. Also carries cron execution and production runtime logging.

LiveKit

Realtime voiceFeature-conditional

Realtime media transport, room signaling, and optional recording orchestration

LegalOpsDeployment

Data involved

Live audio packets, room and session metadata, optional recording artifacts

When used

Browser and live-room interpretation

Deployment variables

LIVEKIT_URL, LIVEKIT_API_KEY, LIVEKIT_API_SECRET, EU_LIVEKIT_URL, US_LIVEKIT_URL

Review note

Required for browser live sessions. Regional URLs matter when residency routing is enabled.

Deepgram

Speech to textFeature-conditional

Speech-to-text transcription and language detection

LegalOpsDeployment

Data involved

Live audio, transcript text, language and confidence metadata

When used

Speech interpretation pipeline

Deployment variables

DEEPGRAM_API_KEY

Review note

Required for live transcription. Missing configuration degrades the realtime speech pipeline.

Anthropic

Translation AIFeature-conditional

Primary large-language-model translation and summarization

LegalOpsDeployment

Data involved

Transcript excerpts, prompts, glossary context, generated summaries

When used

AI translation and intelligence features

Deployment variables

ANTHROPIC_API_KEY

Review note

Primary translation model provider for language tasks and summaries.

OpenAI

Translation AIFeature-conditional

Fallback LLM translation and selected AI features

LegalOpsDeployment

Data involved

Transcript excerpts, prompts, glossary context, generated summaries

When used

Fallback or feature-specific AI tasks

Deployment variables

OPENAI_API_KEY

Review note

Configured as the fallback LLM path when Anthropic is unavailable or a feature uses an OpenAI-compatible flow.

ElevenLabs

Text to speechFeature-conditional

Speech synthesis for translated audio output

LegalOpsDeployment

Data involved

Translated text and voice selection settings

When used

Spoken audio output is enabled

Deployment variables

ELEVENLABS_API_KEY

Review note

Optional. Without it, the product can still run in subtitle-only mode.

Vapi

Telephony orchestrationFeature-conditional

Voice agent orchestration, PSTN call control, and end-of-call reports

LegalOpsDeployment

Data involved

Call metadata, phone numbers, audio or transcript report payloads

When used

Phone-based interpreting flows

Deployment variables

VAPI_API_KEY, VAPI_ASSISTANT_ID, VAPI_PHONE_NUMBER_ID, VAPI_WEBHOOK_HMAC_SECRET, VAPI_WEBHOOK_SECRET, DEFAULT_ORG_ID

Review note

Required for PSTN flows. Webhook authentication must be present or phone events are rejected.

Twilio

Telephony carrierFeature-conditional

Dedicated phone number provisioning and PSTN carrier services

LegalOpsDeployment

Data involved

Business phone numbers, caller and callee metadata, routing data

When used

Dedicated numbers or Twilio-backed calling are enabled

Deployment variables

TWILIO_ACCOUNT_SID, TWILIO_AUTH_TOKEN, TWILIO_NUMBER_COUNTRY

Review note

Used when provisioning dedicated phone numbers for paid plans and carrier-backed PSTN routing.

Stripe

BillingFeature-conditional

Subscription billing, checkout, invoices, and payment method vaulting

LegalOpsDeployment

Data involved

Billing identity, plan selection, invoices, payment references

When used

Paid plans, checkout, or invoicing

Deployment variables

STRIPE_SECRET_KEY, STRIPE_WEBHOOK_SECRET, NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY, STRIPE_PRICE_ID_STARTER, STRIPE_PRICE_ID_PRO, STRIPE_PRICE_ID_BUSINESS, STRIPE_PRICE_ID_ENTERPRISE, STRIPE_PRICE_ID_STARTER_ANNUAL, STRIPE_PRICE_ID_PRO_ANNUAL, STRIPE_PRICE_ID_BUSINESS_ANNUAL, STRIPE_PRICE_ID_ENTERPRISE_ANNUAL

Review note

Paid billing is unavailable until both webhook credentials and price IDs are configured.

Upstash

Caching and queueingFeature-conditional

Redis caching, rate limiting, and queued job delivery

LegalOpsDeployment

Data involved

Cache keys, rate-limit identifiers, retry job payloads

When used

Redis or QStash-backed features are configured

Deployment variables

UPSTASH_REDIS_REST_URL, UPSTASH_REDIS_REST_TOKEN, QSTASH_TOKEN, QSTASH_CURRENT_SIGNING_KEY, QSTASH_NEXT_SIGNING_KEY

Review note

Supports cache durability, retry delivery, and cron-adjacent background work.

Resend

Email deliveryFeature-conditional

Transactional email delivery and contact or audience management

LegalOpsDeployment

Data involved

Recipient emails, invite or contact content, lifecycle email data

When used

Email and contact capture flows are used

Deployment variables

RESEND_API_KEY, RESEND_AUDIENCE_ID, EMAIL_FROM_DOMAIN, SUPPORT_EMAIL, PRIVACY_EMAIL

Review note

Required for production email flows such as invites, support, and billing or lifecycle messages.

Sentry

ObservabilityFeature-conditional

Error monitoring and diagnostics

LegalOpsDeployment

Data involved

Exception payloads, request context, debugging metadata

When used

Error monitoring is enabled

Deployment variables

NEXT_PUBLIC_SENTRY_DSN, SENTRY_ORG, SENTRY_PROJECT

Review note

Recommended in production so regressions and runtime failures surface quickly.

PostHog

AnalyticsFeature-conditional

Product analytics and usage telemetry

LegalOpsDeployment

Data involved

Client identifiers, page views, product usage events

When used

Analytics is enabled

Deployment variables

NEXT_PUBLIC_POSTHOG_KEY, NEXT_PUBLIC_POSTHOG_HOST

Review note

Optional analytics layer. Only active when the client-side key is configured.

Slack

Operational alertsFeature-conditional

Operational alerts, low-NPS notifications, and human escalation dispatch

LegalOpsDeployment

Data involved

Alert text, escalation metadata, feedback summaries

When used

Slack webhooks are configured

Deployment variables

SLACK_WEBHOOK_URL, SLACK_OPS_WEBHOOK_URL

Review note

Optional but helpful for production triage, feedback notifications, and incident visibility.

PagerDuty

Incident responseFeature-conditional

Incident alerting and on-call escalation

LegalOpsDeployment

Data involved

Critical incident payloads and operational context

When used

PagerDuty routing is configured

Deployment variables

PAGERDUTY_ROUTING_KEY

Review note

Optional escalation path for urgent production incidents.

hCaptcha

Abuse preventionFeature-conditional

Bot and abuse protection

LegalOpsDeployment

Data involved

IP, device, and browser interaction signals for risk scoring

When used

Protected signup or form flows

Deployment variables

NEXT_PUBLIC_HCAPTCHA_SITE_KEY, HCAPTCHA_SECRET_KEY

Review note

Protects public entry points such as signup and other form submissions.