1.How we manage subprocessors
Each subprocessor is assessed for security and privacy before use, bound by written data protection terms, and limited to the purpose shown. We remain responsible for them under the Data processing addendum.
To get notice of changes, email support@callfora.com with the subject "Subprocessor updates".
2.Current subprocessors
| Provider | Purpose | Location | Applies to |
|---|---|---|---|
| Oracle Cloud Infrastructure | Hosting of the application, databases, file storage, and telephony servers | India | All customers |
| Telecom carriers (for example QuestBlue, Twilio, Plivo) | Phone numbers, call routing, SMS and MMS delivery, number porting; the carrier depends on the number | United States | Customers with phone numbers |
| Twilio SendGrid | Transactional email such as invitations, confirmations, and notifications | United States | All customers |
| Stripe | Payment processing and billing, including usage-based AI minute billing | United States | Paying customers |
| Sarvam AI | Speech recognition, language model, and speech generation for AI agents, and transcription, summaries, and quality review of calls in queues where call analysis is switched on | Provider based in India | Only when AI agents or call analysis are enabled |
| Cloudflare | Bot protection on website forms (Turnstile) | Global | Website visitors, only when enabled |
Telecom carriers are independent controllers for some data they must keep by law, such as call detail records and messaging registrations.
3.Objections
If you object to a new subprocessor on reasonable data protection grounds, tell us within the 30-day notice period. If we cannot resolve it, you may stop using the affected service and receive a refund of prepaid fees for it, as set out in the Data processing addendum.
Need help with this document?
Choose the route that matches your question. These links do not replace the terms above.