← All legal documents
Subprocessor List
Last updated: May 28, 2026
Verdiex uses the following third party service providers (subprocessors) to deliver the Hearline service. By using Hearline, the Customer consents to the use of these subprocessors for the purposes described.
Telephony and SMS
| Provider | Purpose | Data accessed | Location |
|---|
| Twilio Inc. |
Phone number provisioning, inbound and outbound voice, SMS delivery |
Caller phone numbers, call audio routing, SMS message content |
United States |
Voice AI infrastructure
| Provider | Purpose | Data accessed | Location |
|---|
| Vapi Inc. |
Voice agent orchestration, real time speech to speech |
Call audio, transcripts, structured lead data |
United States |
| Anthropic PBC |
Large language model (Claude) for natural language understanding |
Call transcripts, system prompt context |
United States |
| Cartesia Inc. |
Text to speech voice synthesis (Sonic 2 voices) |
Generated speech text |
United States |
| Deepgram Inc. |
Speech to text transcription |
Call audio |
United States |
| LiveKit Inc. |
Voice activity detection and smart endpointing |
Audio stream metadata |
United States |
Database and storage
| Provider | Purpose | Data accessed | Location |
|---|
| Supabase Inc. |
Database and authentication backend |
Customer accounts, business config, call logs, lead records |
United States (us east 1) |
| Clerk Inc. |
User authentication, magic link sign in |
Customer email, login sessions, authentication tokens |
United States |
Payment processing
| Provider | Purpose | Data accessed | Location |
|---|
| Stripe Inc. |
Payment processing, subscription billing |
Billing email, payment card details (PCI compliant), transaction records |
United States, EU |
Hosting and infrastructure
| Provider | Purpose | Data accessed | Location |
|---|
| Vercel Inc. |
Hosting for app.gethearline.com dashboard |
HTTP requests, authentication cookies |
Global edge network |
| Netlify Inc. |
Hosting for gethearline.com marketing site, IVR functions |
Public website assets, IVR routing logic |
Global edge network |
| Cloudflare Inc. |
DNS, CDN, edge security |
DNS lookups, HTTP request metadata |
Global edge network |
Email delivery
| Provider | Purpose | Data accessed | Location |
|---|
| Resend Inc. |
Transactional email delivery |
Email recipient addresses, email content |
United States |
| Google (Gmail SMTP) |
Outbound discovery call reminders from [email protected] |
Recipient email address, message content |
United States |
Workflow automation
| Provider | Purpose | Data accessed | Location |
|---|
| Make.com (Celonis) |
Backend automation scenarios (SMS routing, lead notifications) |
Call data, lead records, SMS templates |
EU and US |
Calendar and booking
| Provider | Purpose | Data accessed | Location |
|---|
| Cal.com Inc. |
Discovery call scheduling |
Caller name, email, scheduled time slot |
Global |
Changes to this list
Verdiex will notify the Customer via email at least 14 days before adding a new subprocessor that materially affects how Customer data is processed.
The Customer may object to a new subprocessor within 14 days of notification. If the objection cannot be reasonably resolved, the Customer may terminate the affected subscription with a pro rated refund.
Data Processing Agreement (DPA)
Enterprise customers requiring a separate Data Processing Agreement may request one by emailing [email protected]. A standard DPA template aligned with common SaaS provider DPAs is available on request.