Sub Processors
Effective Date:
Aug 1, 2024
Last Updated
Aug 28, 2025
1. Overview
This document lists the sub-processors that Callisi uses to provide our services. These are third-party companies that help us deliver our platform to you. We carefully select these partners based on their security standards and data protection practices.
2. Our Subprocessors
Subprocessor Service Type Data Processed Location Security Certification
Amazon Web Services (AWS)
[View DPA] Cloud Infrastructure All customer data, database, storage, logs United States SOC 2, ISO 27001, GDPR
Vapi
[View DPA] Voice AI Provider Voice call data, API configurations United States SOC 2, GDPR
Retell AI
[View DPA] Voice AI Provider Voice call data, API configurations United States SOC 2, GDPR
ElevenLabs
[View DPA] Voice AI Provider Voice call data, API configurations United States SOC 2, GDPR
Stripe
[View DPA] Payment Processing Payment information, billing data United States PCI DSS, SOC 2, ISO 27001
Make.com
[View DPA] Automation Account details, workflow data Czech Republic SOC 2, GDPR
N8N
[View DPA] Automation Account details, workflow data Germany GDPR
GitHub
[View DPA] Code Repository Source code, development data United States SOC 2, ISO 27001
Google Analytics
[View DPA] Website Analytics Website usage data, IP addresses United States SOC 2, ISO 27001, GDPR
FeatureBase
[View DPA] Product Feedback Collect customer feedback Estonia Working towards SOC 2
OpenAI
[View DPA] Artificial Intelligence Content Summarization functions United States SOC 2, ISO 27001, GDPR
Microsoft Clarity
[View DPA] Product Analytics Usage and app interactions United States SOC2, ISO 27001, GDPR
Verisoul
[View DPA] Fraud Detection User and device info United States SOC2, CCPA, GDPR
3. Why We Use These Services
Infrastructure Services
AWS provides our main cloud infrastructure including databases, storage, and computing power. All client data is stored securely on AWS servers in the United States.
Voice AI Services
These are the voice AI platforms that our clients use and connect to from Callisi interface. We don’t store voice recordings ourselves – we only connect to these services through APIs to display information on our platform. Current Voice AI Providers: Vapi, Retell AI, ElevenLabs
Payment Services
Stripe handles payment processing for our customers. We don’t store payment card information ourselves.
Automation & Other Internal Functions
Make.com and N8N – These services help us automate our internal processes and workflows for better service delivery.
OpenAI GPT API is used to enable our clients to summarize specific events from call transcripts.
Product Development
GitHub stores our source code securely and helps us manage software development.
FeatureBase allows our clients to submit product feedback and request new features.
Analytics Services
Google Analytics helps us understand how our website is used so we can improve it.
4. Data Protection & Data Transfers
All our sub-processors:
Meet appropriate security standards
Have proper data protection certifications
Comply with GDPR and other privacy laws
Use encryption to protect data
Allow us to audit their security practices
All of these sub-processors are covered by Standard Contractual Clauses as the lawful mechanism of data transfer of any personal data.
5. Changes to This List
We may update this list when we add new services or change existing ones. When we make significant changes, we will update this document.
We shall also ensure new sub-processors meet our security requirements.