Data processing
Current subprocessors are listed with service purpose, data processed, processing location, and address.
Legal documentation
Who else processes your data
Third-party service providers that process personal data on behalf of Squawker, as required by our Data Processing Agreement.
Last updated: May 22, 2026
Every call answered. Every lead qualified.
Change notices
Customers can request notification before new subprocessors begin processing personal data.
Legal contact
legal@squawker.ai.
01
Current subprocessors
Squawker engages the following subprocessors to operate the Squawker AI Sales Agent Platform. Each subprocessor is bound by a written data processing agreement that includes obligations equivalent to those Squawker undertakes to its customers.
We provide at least 30 days' written notice before adding a new subprocessor. To subscribe to subprocessor change notifications, email subprocessors@squawker.ai with the subject line "Subscribe to subprocessor notifications".
- Subprocessor
- Supabase, Inc.
- Service provided
- Database, authentication, Row-Level Security, realtime
- Personal data processed
- Account data, Customer Data, CRM records, configuration
- Location of processing
- United States
- Address
- 970 Toa Payoh North #07-04, Singapore 318992 (US data hosted in AWS US regions)
- Subprocessor
- Vercel Inc.
- Service provided
- Frontend hosting, serverless function execution
- Personal data processed
- All website and platform traffic
- Location of processing
- United States
- Address
- 340 S Lemon Ave #4133, Walnut, CA 91789, USA
- Subprocessor
- Railway Corp.
- Service provided
- WebSocket server hosting (polly-websocket)
- Personal data processed
- Real-time call audio, conversation state
- Location of processing
- United States
- Address
- Address available on request
- Subprocessor
- Twilio Inc.
- Service provided
- Telephony infrastructure, SMS, WhatsApp routing
- Personal data processed
- Phone numbers, call metadata, message contents
- Location of processing
- United States
- Address
- 645 Harrison Street, San Francisco, CA 94107, USA
- Subprocessor
- Deepgram, Inc.
- Service provided
- Real-time speech-to-text during live calls
- Personal data processed
- Voice audio (transcribed in flight)
- Location of processing
- United States
- Address
- 1700 Lincoln Street, Suite 3050, Denver, CO 80203, USA
- Subprocessor
- OpenAI, L.L.C.
- Service provided
- Voicemail and post-call transcription (Whisper API); intent analysis, classification, and summarization (GPT API)
- Personal data processed
- Voice recordings, transcripts, conversation context
- Location of processing
- United States
- Address
- 3180 18th Street, San Francisco, CA 94110, USA
- Subprocessor
- ElevenLabs Inc.
- Service provided
- Voice synthesis (Polly's spoken responses)
- Personal data processed
- Text prompts sent for audio synthesis; no end-caller PII required by default
- Location of processing
- United States
- Address
- 169 Madison Avenue, Suite 2901, New York, NY 10016, USA
- Subprocessor
- Cloudflare, Inc.
- Service provided
- Turnstile bot mitigation and contact form abuse prevention
- Personal data processed
- IP address, browser and device metadata, challenge outcome, and contact form verification metadata
- Location of processing
- United States
- Address
- 101 Townsend St, San Francisco, CA 94107, USA
- Subprocessor
- Sentry / Functional Software, Inc.
- Service provided
- Error tracking and observability
- Personal data processed
- Limited application telemetry; user identifiers; technical metadata
- Location of processing
- United States
- Address
- 132 Hawthorne Street, San Francisco, CA 94107, USA
- Subprocessor
- Stripe, Inc.
- Service provided
- Billing and payment processing (when active)
- Personal data processed
- Billing contact, payment method tokens (no full card data stored by Squawker)
- Location of processing
- United States
- Address
- 354 Oyster Point Boulevard, South San Francisco, CA 94080, USA
| Subprocessor | Service provided | Personal data processed | Location of processing | Address |
|---|---|---|---|---|
| Supabase, Inc. | Database, authentication, Row-Level Security, realtime | Account data, Customer Data, CRM records, configuration | United States | 970 Toa Payoh North #07-04, Singapore 318992 (US data hosted in AWS US regions) |
| Vercel Inc. | Frontend hosting, serverless function execution | All website and platform traffic | United States | 340 S Lemon Ave #4133, Walnut, CA 91789, USA |
| Railway Corp. | WebSocket server hosting (polly-websocket) | Real-time call audio, conversation state | United States | Address available on request |
| Twilio Inc. | Telephony infrastructure, SMS, WhatsApp routing | Phone numbers, call metadata, message contents | United States | 645 Harrison Street, San Francisco, CA 94107, USA |
| Deepgram, Inc. | Real-time speech-to-text during live calls | Voice audio (transcribed in flight) | United States | 1700 Lincoln Street, Suite 3050, Denver, CO 80203, USA |
| OpenAI, L.L.C. | Voicemail and post-call transcription (Whisper API); intent analysis, classification, and summarization (GPT API) | Voice recordings, transcripts, conversation context | United States | 3180 18th Street, San Francisco, CA 94110, USA |
| ElevenLabs Inc. | Voice synthesis (Polly's spoken responses) | Text prompts sent for audio synthesis; no end-caller PII required by default | United States | 169 Madison Avenue, Suite 2901, New York, NY 10016, USA |
| Cloudflare, Inc. | Turnstile bot mitigation and contact form abuse prevention | IP address, browser and device metadata, challenge outcome, and contact form verification metadata | United States | 101 Townsend St, San Francisco, CA 94107, USA |
| Sentry / Functional Software, Inc. | Error tracking and observability | Limited application telemetry; user identifiers; technical metadata | United States | 132 Hawthorne Street, San Francisco, CA 94107, USA |
| Stripe, Inc. | Billing and payment processing (when active) | Billing contact, payment method tokens (no full card data stored by Squawker) | United States | 354 Oyster Point Boulevard, South San Francisco, CA 94080, USA |
02
Cross-border transfers
Where personal data of EU or UK individuals is transferred to a subprocessor in the United States, Squawker relies on Standard Contractual Clauses (2021 EU SCCs) and conducts Transfer Impact Assessments as required. Where a subprocessor is certified under the EU-US Data Privacy Framework, Squawker may rely on that framework as the transfer mechanism.
03
How to be notified of changes
To receive notification of new subprocessors at least 30 days before they begin processing, email subprocessors@squawker.ai with the subject line "Subscribe to subprocessor notifications".
Customers with an executed Data Processing Agreement may also object to a new subprocessor on reasonable grounds within the notice period; please contact legal@squawker.ai.
04
Past subprocessors
No removed subprocessors are listed at this time.
05
Contact
legal@squawker.ai