Sub-processors

Supabase · Supabase, Inc., San Francisco, USA

Purpose:

Database, authentication and file storage

Data:

All workspace data (leads, appointments, sales, transcripts, reviews, user accounts); integration credentials encrypted

Place of processing:

EU (Frankfurt am Main)

Third-country basis:

Stored in the EU; remote access for support and maintenance under the EU Standard Contractual Clauses

Always in use

Vercel · Vercel Inc., San Francisco, USA

Purpose:

Hosting of the web application, server functions and scheduled jobs

Data:

All data passing through the application during use; technical access data

Place of processing:

EU (Frankfurt am Main); static content delivered through a global network

Third-country basis:

EU Standard Contractual Clauses (Art. 46(2)(c) GDPR); additionally the EU-US Data Privacy Framework where the provider is certified

Always in use

Anthropic · Anthropic PBC, San Francisco, USA

Purpose:

AI features: the Neo assistant, reports, lead grading, call reviews, speaker detection, website and sales-script analysis

Data:

The content each task needs, including metrics, lead details and questionnaire answers, call transcripts including participants' names

Place of processing:

USA

Third-country basis:

EU Standard Contractual Clauses (Art. 46(2)(c) GDPR); additionally the EU-US Data Privacy Framework where the provider is certified

Always in use

ElevenLabs · ElevenLabs Inc., New York, USA

Purpose:

Speech-to-text for call recordings; voice output in call training

Data:

Audio of the calls, not stored at the provider or deleted there right after transcription; in call training only the text to be spoken

Place of processing:

USA

Third-country basis:

EU Standard Contractual Clauses (Art. 46(2)(c) GDPR); additionally the EU-US Data Privacy Framework where the provider is certified

Only when the feature is used

Resend · Plus Five Five, Inc. (Resend), San Francisco, USA

Purpose:

Sending system emails (invitations, access links, notifications)

Data:

Recipients' email address and name, message content

Place of processing:

EU (Ireland)

Third-country basis:

EU Standard Contractual Clauses (Art. 46(2)(c) GDPR); additionally the EU-US Data Privacy Framework where the provider is certified

Always in use

Sentry · Functional Software, Inc. (Sentry), San Francisco, USA

Purpose:

Detecting and fixing technical errors

Data:

Technical error data; personal content is largely stripped before sending

Place of processing:

EU (Frankfurt am Main)

Third-country basis:

EU Standard Contractual Clauses (Art. 46(2)(c) GDPR); additionally the EU-US Data Privacy Framework where the provider is certified

Always in use