Sub-Processor Register
The following sub-processors may process personal data when delivering Voice AI services
Sub-processors are used solely for the purpose of delivering Voice AI services.
All providers operate under contractual data protection obligations and security frameworks designed to support compliance with UK GDPR.
Provider
Purpose
Data Processed
Location
DPF Certified
Safeguard Used
Twilio
Retell AI
Open AI
Google (Gemini)
Microsoft Azure
Zapier
Pipedream
Deepgram
ElevenLabs
Telephony infrastructure
Voice AI orchestration and processing
Language model processing
Language model processing
Hosting of dashboards and infrastructure
Workflow automation and integration
Integration services and automation
Speech-to-text transcription infrastructure
Text-to-speech generation infrastructure
call audio, call metadata
call audio, transcripts
transcripts, prompts
transcripts, prompts
transcripts, recording, metadata
structured outputs, webhook data
structured outputs, webhook data
call audio and generated transcripts
generated response text and audio output
US / Global
US
US
US / Global
UK (UK South)
US
US
US
US
Yes
No
No
Yes
Yes
No
No
No
No
EU-US DPF / Extension
Standard Contractual Clauses (SCC's)
Standard Contractual Clauses (SCC's)
EU-US DPF / Extension
EU-US Data Privacy Framework
Standard Contractual Clauses (SCC's)
Standard Contractual Clauses (SCC's)
Standard Contractual Clauses (SCC's)
Standard Contractual Clauses (SCC's)