01Current subprocessors
Not every vendor sees every call. A call involves the vendors the agent is configured to use, and customers who bring their own accounts send that data under their own contract with the vendor instead.
| Vendor | Purpose | Data | When |
|---|---|---|---|
| Deepgram | Speech-to-text | Call audio, transcripts | Agents set to Deepgram, and as overflow when our own inference is saturated |
| Anthropic | Language model | Transcript text, prompts, tool results | Agents using Anthropic models |
| OpenAI | Language model | Transcript text, prompts, tool results | Agents using OpenAI models, and as fallback |
| Cartesia | Text-to-speech | Text the agent speaks, voice ID | Agents using Cartesia voices |
| ElevenLabs | Text-to-speech | Text the agent speaks, voice ID | Agents using ElevenLabs voices |
| Twilio | Telephony carrier | Phone numbers, call audio, call metadata | Calls on Twilio numbers |
| SignalWire | Telephony carrier | Phone numbers, call audio, call metadata | Calls on SignalWire numbers |
| Stripe | Payment processing | Billing contact, payment details (held by Stripe) | Adding prepaid credit |
| Object storage (S3/R2-compatible) | Call recording storage | Call recordings | Agents with recording enabled |
| Email delivery provider | Transactional email | Name, email address, message content | Verification, invites, password reset, notices |
| Infrastructure hosting provider | Hosting, database, networking | All data the Service holds | Always |
Our own self-hosted speech models run on infrastructure we operate; they are not a separate subprocessor. Customers using our DPAcan ask for the hosting provider’s current name and region at privacy@dialgem.com.
02How we manage them
- Each is bound by a written agreement with data protection terms no less protective than our DPA.
- We send only the data each needs for its function, and do not allow vendors to train models on customer call content where we can contract against it.
- We remain responsible to customers for our subprocessors’ performance.
- Transfers outside the UK/EEA use Standard Contractual Clauses or an equivalent safeguard.
03Changes
We will give customers at least 30 days’ notice by email or in the console before adding or replacing a subprocessor that processes customer content. A customer with reasonable data-protection grounds to object can write to privacy@dialgem.com within that period; if we cannot resolve it, they may stop using the affected feature or terminate and receive a refund of unused prepaid credit. This list is maintained by Achroweb Solutions for Dialgem.