Subprocessors
Who else touches your firm's data, and why.
We keep this list short on purpose. Each provider receives only what its task needs, and is switched on only once it is bound by written terms that limit it to that task and forbid training AI models on your data.
Current list
"Not active yet" means the feature is built but switched off on our production service, so nothing is sent to that provider today. We will notify firm owners before any of them is switched on, as described below.
| Provider | What it does | Data it receives | Location | Status |
|---|---|---|---|---|
| CallMOR (our own infrastructure) | Hosting, database, file storage and encrypted backups | All firm data | United States | Active |
| CallMOR identity server | Sign-in, second factor and passkeys | User name, email address, sign-in factors | United States | Active |
| CallMOR mail server | Sending account, billing and firm emails | Recipient address, email content | United States | Active |
| Twilio Inc. | Phone numbers, calls and text messages | Phone numbers, message content and media | United States | Not active yet |
| Deepgram, Inc. | Turning call audio into text | Call audio (sensitive numbers are redacted in the returned transcript) | United States | Not active yet |
| Anthropic, PBC | AI matter suggestions, narratives and intake reading (Claude models) | Transcript or text excerpts with sensitive numbers removed, candidate matter names and numbers | United States | Not active yet |
| Vapi, Inc. | AI receptionist for after-hours and overflow calls, if a firm turns it on | Caller audio and number, intake answers | United States | Not active yet |
| Stripe, Inc. | Subscription billing, and client card and bank payments | Firm billing contact, plan and usage; payer details entered on Stripe's pages | United States | Not active yet |
| Functional Software, Inc. (Sentry) | Error reports from our servers | Technical error details; personal data is excluded by default | United States | Not active yet |
Services you connect yourself
These are not our subprocessors. Your firm chooses to connect them, and they act under your firm's own agreement with them: Gmail or Microsoft 365 for filing email (read-only access), your own outgoing mail server, your Stripe account for client payments, and a QuickBooks export file you download.
What we do not use
- No advertising networks, data brokers or social media pixels.
- No third-party web analytics. Visit counting on our public pages is our own and uses no cookies.
- No third-party scripts, fonts or content delivery networks on our pages.
- No offshore support teams with access to firm data.
How we announce changes
We email firm owners at least 30 days before a new subprocessor starts receiving firm data, or before a provider marked "Not active yet" is switched on, and we update this page. If your firm has a reasonable objection on data-protection grounds, tell us at hello@callmor.ai. We will try to find a solution, such as keeping the feature off for your firm; if we cannot, you may cancel without penalty and receive a refund of prepaid fees. See section 7 of our data processing addendum.