This page lists the third-party providers ("Sub-processors") that CallGuard AI uses to deliver the Services. Each of these Sub-processors may Process Customer Personal Data on our behalf. We have entered into a written data-protection agreement with each Sub-processor that contains obligations no less protective than those set out in our Data Processing Agreement.
We notify customers of any addition or replacement of Sub-processors at least 30 days before the change takes effect. Customers may subscribe to updates by emailing privacy@callguardai.co.uk.
AI & transcription
| Sub-processor | Purpose | Data accessed | Location | Transfer safeguard |
|---|---|---|---|---|
| Anthropic Privacy · DPA |
AI scoring, breach detection, coaching generation, insights via the Claude API | Call transcripts, scorecard text, knowledge-base content | United States (with EU regional options) | UK Addendum to EU SCCs · Anthropic does not train on customer API data |
| Deepgram Privacy · DPA |
Speech-to-text transcription for batch and live audio streams | Audio recordings and resulting transcripts | United States | UK Addendum to EU SCCs · Deepgram offers a no-training option enabled by default for our account |
Hosting & infrastructure
| Sub-processor | Purpose | Data accessed | Location | Transfer safeguard |
|---|---|---|---|---|
| Amazon Web Services (AWS) Privacy · Data protection |
Compute, encrypted disk storage and managed PostgreSQL database hosting (Amazon Lightsail) | All Customer Personal Data at rest | United Kingdom (London region) | UK BCRs · UK Addendum to EU SCCs |
| Cloudflare Privacy · DPA |
DNS, edge caching, DDoS mitigation, Web Application Firewall | Request metadata and IP addresses; no Customer Personal Data is stored at the edge | Global edge network with EU/UK preference where supported | UK Addendum to EU SCCs |
Communications
| Sub-processor | Purpose | Data accessed | Location | Transfer safeguard |
|---|---|---|---|---|
| Resend Privacy · DPA |
Transactional email delivery (account notifications, breach alerts, invoices) | Recipient email addresses, message contents (no audio or transcripts) | United States with EU/UK delivery routing | UK Addendum to EU SCCs |
| Slack (used only when a customer opts in) Privacy · DPA |
Slack-channel breach and alert delivery, when configured by a customer in their account settings | Alert payload metadata; Customer can configure scope. No audio or full transcript transmitted. | Global; Slack handles its own transfer safeguards | Customer-configured webhook URL · contractual flow-down |
Website analytics
| Sub-processor | Purpose | Data accessed | Location | Transfer safeguard |
|---|---|---|---|---|
| Google (Google Analytics 4) Privacy · Data processing terms |
Aggregate website usage measurement on callguardai.co.uk. Loaded only after the visitor consents via our cookie banner. Not used on the application or for any Customer Personal Data. | Marketing-site visitor data only: anonymised IP, pages viewed, referrer, device/browser. No call audio, transcripts or account data. | Google Ireland Limited (EU), with onward transfer to the United States | EU SCCs · UK Addendum · IP anonymisation and Google Consent Mode enabled |
Customer-configured integrations
Where a customer chooses to integrate the Services with a third-party platform of their own (e.g., Twilio, AWS Connect, Vonage for live audio streaming; their own CRM or webhook endpoint), that third party is acting on the customer's instruction, not on ours. CallGuard AI does not enter into a Sub-processor relationship with these third parties on the customer's behalf. The customer is responsible for any DPAs or transfer safeguards required between themselves and those parties.
How we update this list
When we add or replace a Sub-processor:
- We update this page with the new entry and the effective date;
- We email all active customers at least 30 days before the change takes effect;
- Customers may object on reasonable data-protection grounds within 14 days of notification, in which case we will work to find an alternative or, failing that, the customer may terminate the affected Service on the terms set out in the DPA.
To subscribe to changes by email, send a request to privacy@callguardai.co.uk.
Questions
- Sub-processor and data-flow questions
- privacy@callguardai.co.uk
- General contact
- hello@callguardai.co.uk