Sub-processors
Last updated November 6, 2026
To deliver the service, Kintara Group uses the vendors below to process data on the Customer’s behalf. Each is bound by a written agreement that requires protection equivalent to our Data Processing Addendum.
Current sub-processors
| Vendor | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase | Database, authentication and file storage | Account details, Customer Data, call records, recordings and transcripts | United States |
| Vercel | Application hosting and delivery | Requests and application logs; data in transit to and from the app | United States |
| Vapi | Voice AI orchestration for live calls | Call audio, transcripts, caller phone numbers | United States |
| Twilio | Phone numbers, calls and SMS | Phone numbers, call audio and metadata, SMS content | United States |
| Telnyx | Backup telephony and SMS (failover) | Phone numbers, call audio and metadata, SMS content | United States |
| Deepgram | Speech-to-text | Call audio and transcripts | United States |
| ElevenLabs | Text-to-speech voices | Text spoken by the AI agent | United States |
| OpenAI | Language models and transcription | Transcripts, prompts, call audio for transcription | United States |
| Anthropic | Language models | Transcripts and prompts | United States |
| Resend | Email delivery | Recipient email addresses and message content | United States |
| Stripe | Payments and billing | Billing contact details and payment data (card numbers are held by Stripe) | United States |
| Calendar integration and OAuth sign-in | Name, email, calendar availability and appointments the Customer connects | United States |
Changes and objections
We give customers at least 30 days’ notice before adding or replacing a sub-processor. To receive notice or to object on reasonable data protection grounds, email privacy@kintaragroup.com. Tools a customer chooses to connect (for example a practice management system) are not our sub-processors.