Subprocessors
Last updated: September 18, 2026
Dialfyne engages the following subprocessors to deliver the Services. Each is bound to process personal data only on Dialfyne's instructions (except independent controllers such as Stripe for cards) and to maintain appropriate security. This list is the Sub-Processor List referenced in the DPA. Object within 14 days of an update by emailing [email protected].
Core product
| Subprocessor | Purpose | Data | Location |
|---|---|---|---|
| Telnyx | Telephony (calls, numbers) and Call Control | Call audio, phone numbers, metadata | USA |
| Deepgram (including via Telnyx) | Speech-to-text | Call / streaming audio, transcripts | USA |
| Google (Gemini) | Live roleplay speech | Live audio or text as configured | USA |
| Typesafe (Jev) | Classification of live objections, call outcomes, and inbound email replies | Bounded transcript excerpts, prospect turns, and email reply text | USA |
| Z.AI (GLM) | Scoring, coaching, email drafting, and fallback classification | Transcripts and bounded prompts; API content is not retained by Z.AI | Singapore |
| Exa | Company / web research for email and live-context features | Company names, domains, public web results, bounded prompts | USA |
| Perplexity | Company trigger research for email campaigns | Company names, domains, public web results | USA |
| xAI | Optional X/Twitter research when a roleplay room includes a public handle | Public social handles and bounded summaries | USA |
| Supabase | Database, storage, authentication | Stored workspace data, recordings, transcripts | USA |
| Vercel | Portal and marketing hosting | Request and session data | USA |
| Railway | Voice server and outbound APIs | Call audio in transit, application data | USA |
| Cloudflare | CDN, DNS, bot protection, Turnstile | Request data | USA / global edge |
| Stripe | Payments | Billing contact and payment metadata | USA |
| Resend | Transactional email | Email addresses and message content | USA |
| InboxKit | Mailbox / sending-domain infrastructure | Mailbox and sending-domain configuration, message traffic as needed | USA |
Marketing website visitors
| Subprocessor | Purpose | Data | Location |
|---|---|---|---|
| Google Ads | Website advertising and conversion measurement | Usage and advertising identifiers | USA |
| LinkedIn Insight Tag | Website advertising and retargeting | Usage and advertising identifiers | USA |
| Vercel Analytics | Website analytics | Usage data | USA |
| Ahrefs Analytics | Website analytics | Usage data | Singapore / global |
| Apollo.io | Sales intelligence / visitor enrichment | Business visitor / prospect data | USA |
| RB2B | Website visitor identification | Website visitor data | USA |
How this list works
- These vendors help Dialfyne place calls, transcribe, classify, score, host, send email, research companies, and take payment.
- Typesafe (Jev) is the production classifier for live objections (after a keyword match misses), post-call outcomes, and inbound email reply tags. Typesafe's public terms say they do not train on customer input. They do not publish a zero-retention guarantee. Dialfyne stores the resulting labels in the Customer's workspace.
- Z.AI. GLM 5.3 Flash scores, coaches, drafts email, and is the fallback classifier when Jev is unavailable or uncertain. Z.AI does not retain API content. Its API DPA states that API content is processed in real time and is not stored on their servers. API Customer Data is generally processed in Singapore. Dialfyne still stores the resulting transcripts, drafts, and scores in the Customer's workspace.
- Google Gemini is the live roleplay buyer. It is not the classifier, scorer, or email writer.
- Stored Customer Data remains in the United States. Inference and research may occur in the countries listed above. EEA, UK, and Swiss transfers use the Standard Contractual Clauses in the DPA.