Sub-processors
Sub-processor list
A sub-processor is a third party that may process personal data on our behalf to help us deliver the service. We engage each one under a data processing agreement and a valid international transfer mechanism, and we notify customers before adding or changing a sub-processor that affects them.
Effective 3 June 2026
| Sub-processor | Purpose | Personal data | Location | Transfer mechanism |
|---|---|---|---|---|
| Hetzner | Hosting (database, edge, storage, telephony) | All platform data | Germany (EEA) | None needed (EEA) |
| Cloudflare | CDN, web delivery, WAF | Request metadata, static assets | US / global | DPF + SCCs |
| Self-hosted Whisper (STT) | Speech-to-text transcription | Call audio → text | Mixel EEA infrastructure | None — stays in the EEA |
| Self-hosted AI (Call Intelligence) | Summaries, sentiment, insights | Transcripts → insights | Mixel EEA infrastructure | None — stays in the EEA |
| Salesforce | CRM screen-pop / call logging (optional) | Contact + call activity | US | EU-US + Swiss-US DPF |
| HubSpot | CRM (optional) | Contact + call activity | US | DPF + SCCs |
| Microsoft 365 | Calendar presence, single sign-on, Teams (optional) | Free/busy, identifiers | US / global | EU-US / Swiss-US DPF |
| Calendar presence (optional) | Free/busy | US / global | DPF | |
| Twilio | SMS / WhatsApp; trunk connectivity | Numbers, message content | US | EU-US / Swiss-US DPF |
| Resend | Email (voicemail-to-email, omnichannel) | Email content, addresses | US | SCCs |
| Stripe | Billing | Customer billing data | US | DPF + SCCs |
| Swisscom (default trunk) | PSTN connectivity | Call metadata | Switzerland | None (CH adequate) |
The data minimisation that matters most
Our speech-to-text and Call Intelligence run on our own infrastructure inside the EEA. This means call audio and transcripts — the most sensitive content on the platform — are never transferred to a third-party AI provider. The third-party services above are used for adjacent functions (hosting, delivery, billing and the integrations a customer chooses to enable).
Telephony trunking
Trunking is bring-your-own / any-carrier; the customer chooses their carrier, with Swisscom as the default in Switzerland. Each customer’s chosen carrier acts as that customer’s sub-processor for connectivity and is documented per organisation.
International transfers
For transfers to the United States we rely on the EU-US and Swiss-US Data Privacy Framework where the recipient is certified, and we maintain the European Commission’s Standard Contractual Clauses (2021) as a fallback so a change to the Framework does not interrupt the legal basis for any transfer.
Optional integrations
Several sub-processors above are only engaged if a customer chooses to connect the relevant integration (for example a CRM, calendar or messaging provider). If a customer does not enable an integration, no personal data is shared with that provider.
For how this fits the wider picture, see our Privacy Notice and Data Processing Agreement.