Sub-processors
Last updated: 26 September 2026
This translation is provided for information only. Only the German version is legally binding.
This list names all service providers that process personal data on our behalf (Art. 28 GDPR) — with purpose, location and the basis for any third-country transfers. We announce changes to this list to our customers in advance, as set out in the data processing agreement.
Amazon Web Services EMEA SARL
- Purpose
- Cloud hosting: compute (ECS Fargate, EC2), databases (Aurora PostgreSQL), cache, storage, encryption (AWS KMS), logging and monitoring
- Location
- Region eu-central-1 (Frankfurt am Main, Germany)
- Third-country basis
- EU processing; AWS Data Processing Addendum, EU SCCs as fallback (US parent company)
Google Cloud EMEA Limited
- Purpose
- AI inference via Vertex AI: language model (Gemini) for call and message replies, and embeddings for the knowledge base
- Location
- Vertex AI: EU multi-region (language model) and region europe-west1, Belgium (embeddings)
- Third-country basis
- EU processing; Google Cloud DPA, EU SCCs as fallback (US parent company)
Soniox, Inc.
- Purpose
- Speech recognition (speech-to-text) for the AI phone assistant
- Location
- EU endpoint (processing in the EU)
- Third-country basis
- US company: DPA with EU SCCs
ElevenLabs, Inc.
- Purpose
- Speech synthesis (text-to-speech) — processes only the spoken response text
- Location
- Global API endpoint — processing may take place outside the EU (USA); a switch to the EU residency endpoint is planned
- Third-country basis
- Third-country transfer: DPA with EU SCCs (Art. 46(2)(c) GDPR)
Telnyx Ireland Limited
- Purpose
- Telephony: phone numbers, call routing (SIP)
- Location
- EU (Frankfurt); EU API endpoints
- Third-country basis
- —
Stripe Payments Europe, Ltd.
- Purpose
- Payment processing and invoicing
- Location
- Dublin, Ireland (transfers to the US possible)
- Third-country basis
- EU-US Data Privacy Framework and EU SCCs
Scaleway SAS
- Purpose
- Transactional email (e.g. account confirmation, invoices)
- Location
- Paris, France (fr-par region)
- Third-country basis
- —
We operate authentication (Zitadel) and the voice infrastructure (LiveKit) ourselves in our own AWS environment in the eu-central-1 region (Frankfurt) — they are not separate sub-processors.