Sub-processors
Last updated: 2026-05-12
AutoShop Voice AI engages the third parties below to deliver the Service. Each Sub-processor is contractually bound to obligations no less protective than those in our Data Processing Agreement. This page is the authoritative list referenced in DPA §6.1.
Per DPA §6.2, customers will receive at least 30 days' notice of any new Sub-processor by email or in-product notification, and may object on reasonable data-protection grounds within 15 days.
| Sub-processor | Service | Region | Categories of Data |
|---|---|---|---|
| Google LLC (Gemini Live API) | Voice AI inference | United States (us-central1) | Call audio (transient — not retained by Sub-processor), transcripts |
| Twilio Inc. | Telephony (PSTN), SMS delivery | United States | Caller phone numbers, call audio, SMS content |
| Stripe, Inc. | Subscription billing | United States | Customer billing data only — no caller Personal Information |
| Akamai Technologies, Inc. (Managed PostgreSQL) | Application database (PostgreSQL) | United States | All categories listed in DPA §3.2 |
| Akamai Technologies, Inc. (Linode Compute) | Application hosting and execution (Node.js / Next.js) | United States | All categories listed in DPA §3.2 |
| Selzy SAS (UniOne) | Transactional email delivery to Customer | United States / EU edge (delivery only) | Customer email address and message content only — no caller Personal Information |
Authentication. Shop owner and staff sessions are first-party httpOnly cookies signed with HS256 JWTs issued by AutoShop Voice (no delegated identity provider for primary login). Password reset and transactional notices may flow through the email Sub-processor listed above.
Questions
Direct privacy or Sub-processor questions to your account representative or to [email protected].