Last updated 24 October 2026
These are the companies that process data on our behalf. Our Privacy Policy explains what we collect and why; this page names the providers behind each category in section 6 of it. We keep this page current, so it changes more often than the policy itself.
| Provider | What it does for us | Where |
|---|---|---|
| Twilio | Telephone numbers, inbound and outbound calls, text messages | United States |
| Vapi | Real-time voice handling — joining the call to the models below, and running the demo on our website | United States |
| Soniox | Speech recognition: turning what the caller says into text | United States |
| Anthropic | The language model that understands the caller and decides what to say (Claude) | United States |
| ElevenLabs | Speech synthesis: the voice the caller hears | United States |
A business can choose different models in its own settings. Where it does, the provider it picks handles that business's calls in place of the one above. The alternatives we support are OpenAI, Google and Groq for language models; Deepgram, AssemblyAI and Microsoft Azure for speech recognition; and Cartesia, PlayHT, OpenAI, Deepgram and Microsoft Azure for voices.
| Provider | What it does for us | Where |
|---|---|---|
| Supabase | Database, sign-in and uploaded files — including our own record of enquiries sent through this website | Canada — our database is in the Canada Central region. Supabase is a United States company, and its staff may access the system from outside Canada in order to support it. |
| Vercel | Hosting for our website and dashboard | United States |
| Railway | Hosting for the automation that books, changes and cancels appointments | United States |
| Cloudflare | The bot check on our callback form | United States and globally |
| Provider | What it does for us | Where |
|---|---|---|
| Stripe | Subscriptions and card payments. We never receive your full card number. | United States / Canada |
| Resend | Sending our email, and receiving email sent to our service addresses | United States |
| Google Calendar and Google Sheets, where a business connects them, and Google Fonts, which loads the typefaces on our pages | United States | |
| Microsoft | Outlook and Microsoft 365 calendars, where a business connects one | United States |
Replacing one provider with another of the same kind is a change we make here, with the date above updated. Adding a new kind of processing, or moving a category of data to a new country, is a material change to our Privacy Policy, and subscribers get 30 days' notice by email before it takes effect.
If you need this list for a vendor review, a due-diligence questionnaire or an insurer, write to hello@zoivox.ca and we will answer.