Sub-processors
Last updated: 29 July 2026
BookedCalls.ai engages the following third-party sub-processors to deliver the Service. We notify customers by email at least 14 days before adding any new sub-processor that will process customer Personal Data. To subscribe to notifications, email dpo@bookedcalls.ai.
For Personal Data transferred outside the UK or EEA, we rely on the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or other valid transfer mechanisms.
Current sub-processor list
| Sub-processor | Purpose | Region |
|---|---|---|
| Convex | Application database and serverless backend | EU (Ireland) |
| Clerk | User authentication and session management | US, EU regions |
| Vercel | Application hosting (admin, customer, marketing apps) | EU + global edge |
| Stripe | Payment processing, invoicing, subscription management | UK + EU |
| Instantly.ai | Email sending infrastructure, inbox warmup | EU + US |
| Nylas | Inbox + calendar API integration (Microsoft 365 / Google Workspace) | EU + US |
| Close | CRM, power dialer + parallel dialer for phone outreach | US (with EU SCCs) |
| Twilio | Phone-number verification (Lookup v2 — line type, carrier, country code). No subscriber identity, SIM-swap, or silent-network-authentication features are used. Default phone-lookup provider. | US (with EU SCCs) |
| NumVerify | Alternative phone-number metadata lookup (line type, carrier, country code). Engaged in place of Twilio Lookup when configured per workspace; no ownership verification, no OTP. | EU (Ireland) |
| Apollo.io | B2B contact enrichment (primary) | US (with EU SCCs) |
| Dropcontact | B2B contact enrichment (EU-focused, GDPR-defensible source) | EU (France) |
| ZeroBounce | Email address verification | US |
| OpenAI | Email generation (GPT-4 family) | US (with EU SCCs) |
| Anthropic | Email generation (Claude family) | US (with EU SCCs) |
| Tavily | Real-time web research for AI personalization | US |
| Perplexity | Web research fallback | US |
| Firecrawl | Web page scraping for company and prospect research — converts URLs discovered during research into page content for AI summarisation. Also used to read public Trustpilot review pages for brand-reputation signal. | US |
| Braintrust | LLM evaluation and observability — receives prospect research data and generated email content as evaluation inputs for email-quality scoring | US |
| OneSignal | Transactional + marketing email delivery, report attachments | US (with EU SCCs) |
| PostHog | Product analytics on the marketing site | EU (Frankfurt) |
| beehiiv | Newsletter subscription management and delivery — stores the email address and signup source of marketing-site newsletter and lead-magnet subscribers | US |
| Contentful | Content management for the marketing site blog and resource library | EU + US |
| Cal.com | Discovery call booking on the marketing site | EU + US |
| Microsoft 365 | Operational email, Teams, SharePoint, MS Bookings | EU |
Transfer mechanisms are confirmed per vendor in that vendor’s data processing agreement. Copies are available on request from dpo@bookedcalls.ai.
Questions
For any sub-processor questions, contact dpo@bookedcalls.ai.