Sub-processors
Last updated: 29 May 2026
This page lists the sub-processors VoxApp Ltd engages to help deliver the Service. It is referenced by, and forms part of, our Data Processing Addendum. We update it before adding or replacing a sub-processor and give at least 30 days' notice of changes, during which customers may object on reasonable data-protection grounds. To be notified of changes, email privacy@voxapp.com.
Core service sub-processors
These providers process Customer and Contact data to deliver the platform's core functions.
| Sub-processor | Role | Data processed | Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting, database, file and recording storage, transactional email | All customer data at rest, recordings, transcripts, email | Australia (Sydney) or EU, by customer region; US planned |
| Twilio | Telephony — voice calls, SMS and WhatsApp carriage, call recording transit | Call audio, phone numbers, message content, call metadata | US; EU (Ireland) region available for voice |
| Burst SMS | SMS delivery for Australia and New Zealand numbers | Phone numbers, message content | Australia |
| Deepgram | Speech-to-text transcription | Conversation audio | US; EU endpoint available |
| ElevenLabs | Text-to-speech voice synthesis | Text to be spoken (conversation context) | US; EU storage available (Enterprise) |
| Cartesia | Text-to-speech voice synthesis (alternative) | Text to be spoken (conversation context) | US |
| OpenAI | Language-model processing and text embeddings | Conversation and configuration text | US; EU region available |
| Anthropic | Language-model processing (summaries, analysis, reasoning) | Transcripts and conversation context | US; EU available via cloud-region hosting |
| Daily | Web and video call transport and recording | Audio and video of web/video conversations | Global; EU recording storage configurable |
| Stripe | Payment processing and subscription billing | Billing contact and payment details (card data handled by Stripe) | US / global (Data Privacy Framework + SCCs) |
Supporting sub-processors
These providers support account access and platform security. Some are engaged only where the customer chooses the relevant feature.
| Sub-processor | Role | Data processed | Location |
|---|---|---|---|
| Account sign-in (where the customer uses Google sign-in) | Account-holder name and email | Global | |
| Microsoft | Account sign-in (where the customer uses Microsoft sign-in) | Account-holder name and email | Global |
| Cloudflare | Bot protection (Turnstile) on web forms | IP address and browser signals | Global anycast network |
Where data is processed
Customer data at rest is stored in AWS Australia (Sydney) or the EU depending on the customer's region; a US region is on our roadmap. For EU customers, VoxApp uses EU-resident processing endpoints where the sub-processor supports them. Where a sub-processor processes data outside the customer's region, those transfers are governed by the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, and the EU-US Data Privacy Framework where applicable. See clause 9 of the DPA.
Customer-enabled integrations
Customers may choose to connect third-party systems (such as their CRM, accounting or e-commerce platform — for example Shopify or Xero) to their account. These are Third-Party Services under clause 17 of the Terms, controlled by the customer rather than engaged by VoxApp, and are governed by the relevant third party's own terms and privacy policy. They are not VoxApp sub-processors.
Contact
Questions about a sub-processor, or to subscribe to change notifications: privacy@voxapp.com.