LegalFor business customers
Sub-processors
To answer calls, store data and take payments, Diallo relies on a small number of providers. This page lists each of them, what it does for us, which personal data it receives and where. It is the list referred to in our Data processing agreement and Privacy policy.
Last updated: 14 October 2026
Current sub-processors
| Provider | What it does | Data | Location |
|---|---|---|---|
| OVHcloud | Hosting of the service, the API and the database | All service data: accounts, agent settings, transcripts, requests, appointments | Poland (EU) |
| Vast.ai | GPU servers we rent and operate: the voice agent, speech recognition and speech synthesis | Call audio and its text while the call is processed | USA |
| Daily | Real-time audio connection for calls in the browser | Call audio in transit | USA |
| Anthropic | Language model: the agent’s replies and the call summaries | Conversation text, the agent’s instructions and knowledge | USA |
| Groq | Language model (alternative): the agent’s replies and the call summaries | Conversation text, the agent’s instructions and knowledge | USA |
| Cloudflare R2 | Storage of call recordings | Audio recordings of calls (deleted after 90 days) | USA (company); Cloudflare data centres |
| Sign-in with a Google account; Google Calendar when a business connects it; Google Analytics on the website, only with consent | Name and email at sign-in; appointment details; website usage statistics | USA, EU | |
| Flitt | Payment service: the secure payment page and recurring card payments (acquiring bank: TBC Bank) | Payer’s email, amount and payment status; card details are entered on Flitt’s page and never reach us | Georgia |
| Telegram | Notifications about new requests and reports, only to the chats a business connects through its own bot | The caller’s name and phone number, the request and the call summary | UAE (company); servers in several countries |
| Email delivery service (SMTP) | Password-reset and service emails | Recipient’s email address and the text of the email | Named here once connected |
Each provider is bound by contract to protect the data and use it only to provide its service to us.
What is not on this list
- The business’s own telecom operator, which connects phone calls to the agent over SIP: the business chooses it and has its own contract with it.
- Tools a business connects itself, for example its CRM or a webhook: they receive the data the business decides to send them, under the business’s responsibility.
- TBC Bank, the acquiring bank for card payments: it processes payment data as an independent controller under the rules of banking law.
Changes to this list
We tell business customers about a new or replacement sub-processor at least 14 days before it starts processing their callers’ data, by email or in the dashboard. A customer may object, as described in section 7 of the Data processing agreement. The date at the top of this page shows when the list last changed.
Questions about our providers: envmotion@gmail.com.