Subprocessors

Everyone who touches the data.

Running a phone line means other companies are involved: someone carries the call, someone turns speech into words, someone works out the driving time. Here they all are, including what each one can actually see.

Effective 21 July 2026. We will say what changed when this is revised.

In use today

CompanyWhat it doesCaller data it can see
TelnyxPhone numbers, call carriage and call recordingCaller phone number, call audio
OpenAIThe speech model that holds the conversation, and transcriptionCall audio, transcript
LiveKitReal-time audio transport and agent hostingCall audio
SupabaseThe application databaseName, phone number, service address, transcript
TomTomDriving-time and routing lookupsA Netherlands company, so this lookup leaves the United States.Service address or its coordinates
GeocodioTurning a spoken address into a locationService address
VercelWebsite and application hosting, plus cookieless analyticsNone. Visitor IP and request metadata only
UpstashRate limiting on our web formsNone. Salted, hashed identifiers only
SentryError monitoringNone. Error diagnostics, with personal data redacted before sending
GitHubScheduled jobs that fetch and later delete call recordingsCall audio, in transit

Announced, not yet in use

These are listed before they process anything, deliberately. Giving notice ahead of switching a company on is how this is supposed to work, and it means you are never surprised by a name appearing here after the fact. Neither of these is processing any data at the time of writing.

CompanyWhat it doesCaller data it can see
StripePayments and subscription billingNone. Shop billing details only, held by Stripe
ResendTransactional email, such as booking and lead notificationsCaller email address, if one was ever captured

Two things worth pointing out

The routing lookup leaves the United States. TomTom is a Netherlands company, and working out real driving time means sending it the service address. Everything else on this list is US based.

Several of these never see a caller at all. Our rate limiting stores a salted, hashed identifier rather than a visitor’s address, so the company providing it holds nothing that can be traced back to a person. Our error monitoring strips personal data before an event is sent. Those are design decisions, not accidents, and they are the reason those rows say “none”.

Changes

When a company is added to this list we will say so before it starts processing. If a change matters to you and you would rather not continue, that is a fair reason to leave and we will not make it difficult.