Last updated: 1 July 2026

This document is written in plain language for transparency. It is not legal advice, and it does not replace a signed agreement where one applies. If anything here conflicts with a contract we have signed with you, that contract governs.

1. How we use sub-processors

A sub-processor is a third party we engage to process personal data on your behalf when we act as your processor, under our Data Processing Addendum. We engage them only under written terms with data-protection obligations consistent with the DPA, and only for the categories below.

2. Categories of sub-processors

Each category below lists the purpose, the personal data typically involved, and the processing region.

Voice & speech AI: turning speech into text, generating the agent's voice, and running the conversation. Processes call audio and transcripts. Region: in-region where available, with safeguards for any transfer.
Telephony & SIP: connecting inbound and outbound calls over the phone network. Processes phone numbers and call metadata. Region: India, via your own or our carrier.
Cloud infrastructure & storage: hosting the platform, database and recordings. Processes all service data at rest. Region: India (in-region), with a self-host option.
Messaging: sending WhatsApp, SMS and email follow-ups you configure. Processes recipient contact details and message content. Region: per provider, under your connected accounts.
Payments: processing subscription and wallet payments. Processes billing details; we do not store full card numbers. Region: India.
Analytics & monitoring: keeping the service secure and reliable. Processes usage and log data. Region: in-region where available.

3. The current named list

The specific, named list of sub-processors that are live at any time is available to customers and prospects on request, and to signed customers under the DPA. We keep the list current and limit it to what the service needs.

4. Where data is processed

By default, personal data is stored and processed in-region on Indian infrastructure. Where any processing outside India is necessary (for example, a specific AI capability), we apply appropriate contractual and technical safeguards, consistent with applicable law. Enterprise customers can self-host the voice infrastructure and bring their own providers for tighter control.

5. Changes and notice

We vet every sub-processor before we engage it. When we intend to add or replace one that processes your personal data, we give reasonable notice so you can review it, and you may object on reasonable data-protection grounds as set out in the DPA.

6. Requesting the list

For the current named sub-processor list, or to be notified of changes, contact legal@aicallstudio.com. See also our Security page and Data Processing Addendum.

Questions about this document? Email legal@aicallstudio.com, or call us on +91 922 222 8989.

Sub-processors