Subprocessors
Last updated: 6 September 2026
This page lists the subprocessors TapCall uses to deliver its services. It is referred to by the data protection annex of our service agreements, made under Article 28 of the GDPR, and forms part of them.
Notice of changes. We inform our clients before adding or replacing a subprocessor that handles their personal data, at least thirty (30) days in advance except where a change is required urgently for security or legal reasons. A client may object to a change on legitimate data protection grounds, and where no solution is found the client may terminate the affected service without penalty.
| Subprocessor | Purpose | Categories of data | Location of processing |
|---|---|---|---|
| ElevenLabs, Inc. | Voice AI agent, speech recognition, call transcription and recordings | Call audio, transcripts, caller phone number | United States |
| Twilio Inc. | Telephone numbers, inbound and outbound calls, call transfers, SMS | Caller phone number, call metadata, SMS content | United States |
| Supabase, Inc. | Database, file storage for call recordings, dashboard authentication | Call records, transcripts, recordings, CRM contacts, user accounts | United States (us-west-2) |
| Vercel Inc. | Hosting of the application and its interfaces | Data in transit, technical logs | United States |
| Resend (Plus Five Five, Inc.) and Amazon Web Services | Delivery of call notification and summary emails | Recipient email address, call summary, caller phone number | United States |
| Anthropic PBC | Translation of a call summary when the voice platform did not produce it in the client language | Call summary text only | United States |
| Stripe, Inc. | Subscription payments, payment method storage, invoicing | Billing contact, billing address, VAT number, payment method | United States and Ireland |
| Google LLC | Two-way calendar synchronisation, only when the client connects their own calendar | Appointment details, attendee name and contact | United States |
| Netlify (Netlify, Inc.) | Hosting of the public tapcall.net website and its contact forms | Prospect contact details submitted through the website | United States |
Transfers outside the European Economic Area
TapCall is operated from the United States and the subprocessors above process data there. Where personal data of individuals in the European Economic Area is transferred, the transfer relies on the European Commission's standard contractual clauses together with appropriate supplementary measures, unless an adequacy decision applies. We will provide, on request, the countries involved, the categories of subprocessor concerned and the legal mechanism used.
Contact
Questions about this list, or an objection to a change, can be sent to privacy@tapcall.net.