Sub-processors
Last updated: July 29, 2026
To run CallCompanion we rely on a small set of trusted third-party companies (“sub-processors”). Each one only receives the data it needs to do its job, and only to operate the service — never to sell or advertise to you. This page lists every company that customer data may pass through, what they do, and where they operate.
Most of these companies are in the United States. Your account and call records are stored in Canada (Supabase, Canada-Central region), but the telephone, voice, transcription, AI, and payment steps are performed by U.S. providers, so some call and message content is processed in the United States. By using CallCompanion you consent to this cross-border processing, disclosed here in line with PIPEDA and Quebec Law 25.
| Company | What it does | Data it handles | Where | Policies |
|---|---|---|---|---|
| Supabase | Database & login | Account details, contacts, call records, transcripts, messages, bookings | Canada (Canada-Central region) | |
| Vercel | Application hosting | Data in transit while pages and webhooks run | United States / global edge | |
| Twilio | Phone calls & text messages | Phone numbers, call audio/recordings, transcripts, SMS content, call metadata | United States | |
| ElevenLabs | Real-voice AI receptionist (speech-to-text, voice, conversation) | Call audio and conversation content on calls that use the real-voice add-on | United States | |
| Google (via ElevenLabs) | Language model (Gemini) powering the voice agent | Conversation text passed through the ElevenLabs voice agent | United States / global | |
| Anthropic | Claude — classifies calls & drafts replies | Call transcripts and message text (not used to train Anthropic models) | United States | |
| OpenAI | Whisper — voicemail transcription | Voicemail audio converted to text (not used to train OpenAI models via the API) | United States | |
| Stripe | Payments & billing | Billing contact and card details (card data is handled and tokenized by Stripe — we never store card numbers) | United States / global | |
| Cloudflare | DNS for our web addresses | Domain-name lookups (domain and IP only — no call content) | United States / global |
We also host our source code on GitHub; GitHub stores program code only, not your call or customer data. We will update this page before adding any new sub-processor that handles personal data.
This document is general information, not legal advice, and has not been reviewed by a licensed lawyer. Consult a Canadian lawyer before relying on it.