Vendor record · livekit.io
What LiveKit promises about your data.
Where LiveKit publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.
- Where it publishes
LiveKit lists its sub-processors at livekit.io/legal/subprocessors. We last read it on October 15, 2026.
- What has changed
We last saw its sub-processor list change on September 7, 2026, and its data processing agreement on September 7, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.
- Its window
When it adds a sub-processor, its clause at livekit.io/legal/data-processing-addendum (read October 15, 2026) gives you 10 days to object.
- Window
- 10
- Sub-processors
- 29
- Pages
- 6
- Copies
- 51
days to object when it adds a sub-processor
sub-processors named
pages we watch
dated copies of all its pages, since August 31, 2026
LiveKit DPA
LiveKit's data processing agreement gives 10 days to object to a new sub-processor. Here is the clause, from our October 15, 2026 copy:
10
days to object
“If no objection has been raised within the ten (10) day period mentioned in Section 6.2, LiveKit will deem Customer to have authorized the new Sub-processor.”
Found automatically and not yet checked by a person. The quote is exact, and the link goes to the source. Nothing here says whether the term is good or bad, only that LiveKit published it.
livekit.io/legal/data-processing-addendum · read 2026-10-15 · fingerprint 5d975fe07f73945e…
How it says it sends notice
“Customer authorizes LiveKit to engage Sub-processors to process Customer Content within the Services for the Permitted Purposes provided that LiveKit maintains an up-to-date list of its Sub-processors at https://livekit.com/legal/sub-processors, which contains a mechanism for Customer to subscribe to notifications of new sub-processors.”
livekit.io/legal/data-processing-addendum · read 2026-10-15
What it says if you do not object
“If no objection has been raised within the ten (10) day period mentioned in Section 6.2, LiveKit will deem Customer to have authorized the new Sub-processor. 7.”
livekit.io/legal/data-processing-addendum · read 2026-10-15
Notice windows across every vendor we watch · Silence as consent
LiveKit sub-processors
LiveKit publishes a sub-processor list at livekit.io/legal/subprocessors; we last read it on October 15, 2026. It names 29 entries. The first 15, as the list prints them: Ashby; AssemblyAI; Baseten; Cartesia; Cerebras; Cockroach Labs; Datadog; Deepgram; DigitalOcean; Google; Groq; Hubspot; Inworld; Lightdash; Loops; and 14 more in the full table below. The latest change to the list in the public record was read on September 7, 2026.
29 named · full table
Latest public change · read 2026-09-07
− Elevenlabs | Model inference | United States |
Every public change we have recorded · Where vendors publish their lists
How long LiveKit keeps your data
LiveKit's data processing agreement (livekit.io/legal/data-processing-addendum, in the copy read October 15, 2026) says: “LiveKit may maintain encrypted backups of Customer Content for up to 30 days following deletion for disaster-recovery purposes, after which such backups are securely purged. 9.1 Retention Required by Law.”
Training on customer data
“(b) log Customer inputs or outputs, excluding non-content security and operational metadata such as request counts, latency metrics, and error events that do not include Inference Data; or (c) use Inference Data to train, fine-tune, or otherwise improve any model or service.”
livekit.io/legal/data-processing-addendum · read 2026-10-15
Training on customer data
“We have opted out, on your behalf, of any use of Voice Samples (including any biometric data contained in them) by those inference providers for training, fine-tuning, or other improvement of their models; we likewise do not use Voice Samples to train our own models.”
livekit.io/legal/privacy-policy · read 2026-10-10
Training on customer data
“Notwithstanding the foregoing, if Customer uses Third-Party Service Provider models or functionality through LiveKit Inference, such providers are contractually required to provide Customer with zero data retention ("ZDR") and will not retain, log, train, fine tune or otherwise use Inference Data for model improvement.”
livekit.com/legal/terms-of-service · read 2026-10-10
Training on customer data
“On Customer's behalf, LiveKit opts out of the use of Voice Samples (including any biometric identifiers or biometric information contained therein) by inference providers for training, fine-tuning, or other improvement of their models.”
livekit.com/legal/terms-of-service · read 2026-10-10
Retention windows vendors publish · What vendors say about training
What the pages say
Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.
Sub-processors named · 29 · 6 name an AI provider we list
Ashby
Recruitment
United States
AssemblyAIAI · AssemblyAI
Model inference
United States
BasetenAI · Baseten
Model inference
United States
Cartesia
Model inference
United States
CerebrasAI · Cerebras
Model inference
United States
Cockroach Labs
Database for customer accounts
United States
Datadog
Events logging
United States
DeepgramAI · Deepgram
Model inference
United States
DigitalOcean
Data center provider
United States
Data center provider
United States
GroqAI · Groq
Model inference
United States
Hubspot
Customer communications
United States
Inworld
Model inference
United States
Lightdash
Customer communications
United States
Loops
Customer communications
United States
Metabase
Product analytics
United States
Microsoft
Model inference
United States
Modal
Model inference
United States
Notion
Knowledge base
United States
OpenAIAI · OpenAI
Model inference
United States
Oracle
Data center provider
United States
PostHog
Web analytics
United States
Pylon
Customer communications
United States
Rime
Model inference
United States
Salesforce
Customer communications
United States
Slack
Customer communications
United States
SpaceXAI
Model inference
United States
Stripe
Payments processing
United States
Vercel
Model inference
United States
Certifications the trust page names · ISO 27001 · PCI DSS · SOC 2 Type II
Laws the trust page names · GDPR · HIPAA
International transfer notice · United Kingdom
“To the extent Customer's use of the Services requires an onward transfer mechanism to lawfully transfer Personal Data from a jurisdiction (i.e., the European Economic Area*,* the United Kingdom, Switzerland, or any other jurisdiction listed in Schedule 4 (Jurisdiction Specific Terms) of this Addendum) to LiveKit located outside of that jurisdiction ("Transfer Mechanism"), the terms set forth in…”
livekit.io/legal/data-processing-addendum · read 2026-10-15
Data location · United States
“Observability Data, Telemetry Data, and related logs are stored and processed in the United States or Europe, as determined by the data region selected for Customer's project, and not by the Pinned Region;”
livekit.io/legal/data-processing-addendum · read 2026-10-15
The pages' own stamps: Last Updated 2026-09-10 · Last Updated 2026-10-06 · Last Updated 2026-10-06 · Last Updated 2026-10-06
The pages we watch
Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.
What this page doesn’t tell you
No score.
Nothing here rates LiveKit. A short notice window is a contract term, not a criticism.
Public pages only.
Private notices and negotiated terms are invisible to us. Your agreement may say something different.
Wrong? Tell us.
Corrections are free, always. We reply within 2–3 business days.
How we read a page · The change log
Work at LiveKit? With an email at livekit.io you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.
Is LiveKit in your product? Hear the morning we read a change.
You get the lines that moved, in LiveKit’s own words, and the date any window closes. No card. Nothing to cancel.