Sub-processor List
Last updated: [Date]
This page lists the third-party sub-processors engaged by CloseQ for the processing of personal data. We notify customers at least 30 days before adding or replacing a sub-processor.
Infrastructure & Hosting
| Sub-processor | Purpose | Location |
|---|---|---|
| Vercel Inc. | Application hosting, serverless functions, cron jobs | United States |
| Supabase Inc. | Database, authentication, Row-Level Security | United States |
| Cloudflare Inc. | Object storage (R2) for call audio recordings | United States / EU |
AI & Transcription
| Sub-processor | Purpose | Location |
|---|---|---|
| AssemblyAI Inc. | Speech-to-text transcription of call audio | United States |
| OpenRouter Inc. | LLM API routing for call analysis | United States |
| Google LLC (via OpenRouter) | Large language model (Gemini) for AI analysis | United States / Global |
Communication
| Sub-processor | Purpose | Location |
|---|---|---|
| Resend Inc. | Transactional email delivery (invitations, notifications) | United States |
Optional Integrations
These sub-processors are engaged only if the Customer activates the respective integration:
| Sub-processor | Purpose | Location |
|---|---|---|
| CloudTalk s.r.o. | Call center integration — sync call history and recordings | EU (Czech Republic) |
| Fathom Video Inc. | Meeting recording integration — sync recordings and transcripts | United States |
| Calendly LLC | Demo booking widget on the CloseQ website | United States |
Data Transfer Safeguards
For sub-processors outside the EEA, we rely on Standard Contractual Clauses (SCCs), the EU-US Data Privacy Framework (where certified), and supplementary measures including encryption and access controls.
Changes
Customers are notified of changes at least 30 days in advance. You may object within 14 days as described in our Privacy Policy and Data Processing Agreement.
Contact
For questions: privacy@closeq.io