Sub-processors
Version 2026-04-08 · Effective 8 April 2026
To deliver the PlumberCallGuard Service we rely on a small set of trusted third-party providers (sub-processors) who each process personal data on our behalf. This page lists every current sub-processor, the purpose of each engagement, where the data is processed, and the legal safeguard we rely on for any transfer of personal data outside the United Kingdom.
We will update this page whenever a sub-processor is added, removed, or materially changed. Active customers may subscribe to change notifications by emailing support@plumbercallguard.co.uk.
| Sub-processor | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Twilio Inc. | Inbound and outbound telephony, SMS, call recording, and messaging. | United States / Ireland | UK Extension to the EU-US Data Privacy Framework / Standard Contractual Clauses with UK Addendum. |
| ElevenLabs Inc. | AI voice generation and live conversational voice agent for call handling. | United States | UK International Data Transfer Agreement with Transfer Risk Assessment. |
| OpenAI, L.L.C. | Realtime voice processing for the quote-builder voice feature. | United States | UK Extension to the EU-US Data Privacy Framework (OpenAI is self-certified). |
| Anthropic PBC | AI summarisation of call transcripts (Claude models). | United States | UK Extension to the EU-US Data Privacy Framework (Anthropic is self-certified). |
| Supabase Inc. | Primary database, authentication, and file storage. | European Union (Frankfurt) | Processed within the EU; UK adequacy regulations apply. |
| Stripe Payments UK, Ltd. | Subscription billing, payment processing, and card vaulting. | United Kingdom / United States / Ireland | Data Privacy Framework and Standard Contractual Clauses for any onward US transfer. |
| Resend, Inc. | Transactional email delivery (receipts, password resets, alerts). | United States | UK IDTA / Data Privacy Framework. |
| HighLevel Inc. (GoHighLevel) | Customer relationship management and outreach automation. | United States | UK IDTA with Transfer Risk Assessment. |
| Vercel Inc. | Hosting and content delivery for the web application and marketing site. | United States (global edge network) | Data Privacy Framework and Standard Contractual Clauses. |
| Fly.io, Inc. | Hosting for the telephony relay service. | United Kingdom (London region) | Data is processed in the UK; no international transfer applies. |
| Google LLC (Google Analytics) | Marketing-site analytics and traffic measurement. | United States | UK Extension to the EU-US Data Privacy Framework. |
Questions
If you have any questions about these sub-processors or the safeguards in place, please contact support@plumbercallguard.co.uk.