Trust center / Subprocessors
Who handles your data.
These companies process customer data for SiteCall, what each does with it and where. Last reviewed .
| Subprocessor | What it does | Customer data it handles | Where |
|---|---|---|---|
| Vercel | Hosts the SiteCall web app and runs its scheduled jobs. | Web requests and responses while they are handled, including the calls, texts and account details a page shows, and Vercel's request logs. | United States. The app runs in Vercel's US East region. |
| DigitalOcean | Runs the database, the calling and texting gateway, the background workers and file storage, and keeps encrypted offsite backups. | All workspace data: members, contacts, call and text history, voicemail text and transcripts, and settings. Offsite backups are encrypted by SiteCall before they leave the server. | New York, United States (the server and the offsite backup storage). |
| Telnyx | The carrier. Provides phone numbers, carries calls and texts, and stores call and voicemail audio. | Phone numbers, caller and recipient numbers, call audio, recordings and voicemails, and the text of messages sent and received. | Recordings are stored in the provider's US Central storage region. Calls and texts run on the provider's network. |
| Language-model processing: analysis of call transcripts, voice agents an integrating application provisions with this provider, and an optional model for SiteCall's own voice agents. Also address suggestions at setup and push notifications to Android phones. | Call transcripts for sentiment and outcome analysis; live call audio on calls a voice agent answers through an integrating application that chose this provider; the agent's instructions and the conversation as text when a workspace chooses a Gemini model (through ElevenLabs); an address as it is typed at setup; and notification text with the device's push token. | Live voice agents run in Google Cloud's US Central region. Transcript analysis uses Google's global endpoint, and Google chooses the region. | |
| ElevenLabs | Answers calls for SiteCall's AI voice agents, turns call and voicemail recordings into transcripts, and holds the setup of each workspace's agents. | Live call audio on calls an AI voice agent answers, the caller's and the called number, the conversation as text and the transcripts ElevenLabs keeps for the agent, the transcripts made from recordings, and each agent's name, instructions and chosen voice. | The provider's network; SiteCall does not pin a region. |
| OpenAI | The default language model for SiteCall's AI voice agents, reached through ElevenLabs. | The agent's instructions and the conversation as text, sent by ElevenLabs while a call is live, for workspaces whose agent uses an OpenAI model (the default). | Requests are made by ElevenLabs; SiteCall does not pin a region. |
| Anthropic | A selectable language model for SiteCall's AI voice agents, reached through ElevenLabs. | The agent's instructions and the conversation as text, sent by ElevenLabs while a call is live, for workspaces whose agent uses a Claude model. | Requests are made by ElevenLabs; SiteCall does not pin a region. |
| Stripe | Billing: subscriptions, invoices and payment methods. | The workspace owner's email, the workspace name and identifier, subscription and AI-minute usage records. Card details are entered on Stripe's pages and never reach SiteCall. | The provider's network; SiteCall does not pin a region. |
| Resend | Sends email: voicemail and message notices, account notices and exports of call history. | The recipient's email address and the email itself: voicemail notices, forwarded message text, workspace notices and call history exports (CSV). | The provider's network; SiteCall does not pin a region. |
| Apple | Delivers push notifications to iPhones and iPads. | Notification text and the device's push token. | The provider's network; SiteCall does not pin a region. |
| Browser makers' push services | Deliver notifications to a browser when a member turns on browser notifications. | Notification text and the browser's push subscription address. | Operated by the maker of the member's own browser. |
| PostHog | Product analytics and error reports, and on public marketing pages only, session replay with all text masked. | Page views, button clicks and error reports, with the member's account identifier and email for signed-in use. No call, text or recording content. | United States (PostHog's US cloud). |
| SAM.gov and GLEIF | Public company registries, searched when an owner sets up their company. | The company name the owner types, with city and country if given. No account email or profile. | Public registries; SiteCall does not pin a region. |
| Telegram | Internal alerts to SiteCall staff about new sign-ups and sales requests. | A new member's name and email or phone number, and a sales request's name, work email, company, phone number and message. | The provider's network; SiteCall does not pin a region. |
A service a customer connects with their own account, such as a CRM or an AI voice agent in their own ElevenLabs account, receives data at that customer's direction and is not a SiteCall subprocessor.
How SiteCall protects data is on the security page.