Subprocessors
A subprocessor is a third party that we use to help deliver the Callweave service and that may process customer data on our behalf. We are committed to being transparent about who they are, and to giving customers advance notice before we add or change one. This page reflects that commitment, and the executed DPA carries the canonical, named list.
Below are the categories of subprocessor involved in delivering Callweave, organised by function, with the purpose and the region where processing takes place. We name the website's hosting provider here because it serves this public site. The platform-side providers that touch customer call data are named in full in the customer DPA rather than on this page, and we keep it there on purpose: a public page can go stale or misstate a vendor between updates, whereas the DPA list is the contractually binding source of truth that travels with our change-notice obligation. See how we manage subprocessor changes below.
Current subprocessors
| Function | Provider | Purpose | Processing location |
|---|---|---|---|
| Website hosting, CDN & DNS | Cloudflare, Inc. | Serving the marketing site and static assets. | Global edge (EU/US). |
| Cloud infrastructure & platform hosting | Named in the customer DPA; EU region available on request. | Running the Callweave platform. | EU / customer-region. |
| Telephony & call media | Named in the customer DPA. | Carrying and processing call audio. | Per deployment. |
| Speech-to-text & language models | Named in the customer DPA; no training on customer data. | Transcription and analysis. | Per deployment. |
| Transactional email | Named in the customer DPA. | Service notifications. | EU/US. |
How we manage subprocessor changes
Customers grant a general written authorisation for the use of subprocessors under the DPA. Within that framework:
- We give advance notice before adding a new subprocessor or replacing an existing one for the platform.
- Customers have the right to object to a new subprocessor on reasonable, data-protection grounds, and we will work with you on the next steps if you do.
- Each subprocessor is bound by data protection terms consistent with our own obligations to you, including the relevant transfer mechanisms where data leaves the EU or UK.
Stay informed
Customers are notified of subprocessor changes in line with the DPA. To subscribe to change notices, or to request the current full, named list, email privacy@callweave.ai. We will also confirm processing regions and transfer mechanisms for any specific deployment on request.