Sub-processors
The third-party vendors Zvani uses to deliver the service.
Last updated: 16 May 2026. We notify customers at least 30 days before a new sub-processor begins handling their data, so you have time to object before the change takes effect. Subscribe to changes.
What is a sub-processor?
A sub-processor is a third-party vendor that handles personal data on our behalf in order to deliver the Zvani service. Examples include the cloud provider that runs our servers, the carrier that connects calls, and the AI providers that turn speech into text and produce agent responses.
Each vendor is bound by a data processing agreement (or equivalent contractual terms) that requires them to handle data with at least the same standard of care that Zvani commits to under our customer Data Processing Agreement.
Cloud infrastructure
Compute, storage, networking, and managed services that host the Zvani platform.
| Vendor | Purpose | Data shared | Hosting region |
|---|---|---|---|
| Amazon Web Services (AWS) | Compute, object storage, networking, KMS | All operational data (encrypted at rest) | India (ap-south-1, Mumbai) |
Database & application platform
Managed PostgreSQL and the backing services for accounts, configurations, and operational data.
| Vendor | Purpose | Data shared | Hosting region |
|---|---|---|---|
| Supabase | Managed PostgreSQL, auth bridging, edge functions | Account, configuration, and operational data | Singapore / India |
AI & language models
Providers we route prompts, transcripts, and other model inputs to in order to run agents.
| Vendor | Purpose | Data shared | Hosting region |
|---|---|---|---|
| Google (Gemini) | Large language model inference | Prompts, transcripts, agent context | United States / India |
| OpenAI | Large language model inference, Whisper STT | Prompts, transcripts, audio | United States |
| Anthropic | Large language model inference (Claude) | Prompts, transcripts | United States |
| Sarvam AI | Indian-language LLM and speech models | Prompts, transcripts, audio | India |
Speech (text-to-speech)
Providers that turn agent responses into spoken audio for calls.
| Vendor | Purpose | Data shared | Hosting region |
|---|---|---|---|
| ElevenLabs | Text-to-speech voice synthesis | Text outputs only (no inbound audio) | United States |
Telephony
Carriers that connect inbound and outbound calls between callers and Zvani agents.
| Vendor | Purpose | Data shared | Hosting region |
|---|---|---|---|
| Twilio | PSTN connectivity, SIP trunking, number provisioning | Phone numbers, call audio, signalling metadata | United States / India |
Messaging
Platforms that deliver WhatsApp and chat traffic.
| Vendor | Purpose | Data shared | Hosting region |
|---|---|---|---|
| Meta — WhatsApp Business Platform | Sending and receiving WhatsApp messages on behalf of customers | Phone numbers, message bodies, attachments | Ireland / India (per Meta routing) |
Authentication
Identity providers used to sign customers into Zvani.
| Vendor | Purpose | Data shared | Hosting region |
|---|---|---|---|
| Google (OAuth) | Sign-in / single sign-on | Name, email, profile picture | United States |
Payments
Regulated processors that handle card, UPI, and bank instruments. Zvani does not store full payment instruments.
| Vendor | Purpose | Data shared | Hosting region |
|---|---|---|---|
| Razorpay | Payment processing (India) | Billing identity, payment metadata | India |
How we add or remove sub-processors
- We assess the vendor’s security posture, contractual terms, and data-handling practices before onboarding.
- We update this page at least 30 days before the vendor begins handling customer data, except where a shorter notice is required for security reasons.
- We notify subscribers by email at the same time. Customers may object to a new sub-processor by emailing privacy@zvaniai.com within the notice period.
- If we cannot resolve a reasonable objection, the customer may terminate the affected service component per their agreement.
Regional notes
- India-resident processing. Customers on our India-resident tier are routed to India-region infrastructure and Indian-resident model providers (e.g. Sarvam) only. Contact us for details and availability.
- Cross-border transfers.Where data crosses a border, we rely on Standard Contractual Clauses, the vendor’s adequacy decision, or DPDP-compliant contractual safeguards as applicable.
Questions
For sub-processor questions, contact privacy@zvaniai.com. For grievances under the DPDP Act, please use our Grievance Officer channel.