LegalLast updated 31 August 2026

Sub-processors

Atender uses the third-party services below to deliver its platform. Each one may process data only for the purpose shown here and only on our instructions, and each is listed with the data it can reach.

What is a sub-processor?

You decide what happens to your customers’ personal data, and Atender processes it for you. A sub-processor is a company we engage to help us do that — it may only handle your data on our instructions, for the purpose shown, and under an agreement that binds it to the same duties we owe you.

Recent changes

2026-08-31First publication of this list.

Platform infrastructure

Every Atender tenant uses these.

Service	What it does	Data it can process	Where
Supabase	Database, authentication and file storage	All customer conversation data, contact details, attachments, call recordings	EU
Google Cloud Platform	Application hosting, analytics warehouse, encrypted backups	All platform data, conversation-level analytics	EU
Cloudflare	DNS management and bot protection for tenant domains	Visitor IP addresses	Global
Approximated	TLS termination for tenant custom domains (help centre, status pages)	Visitor IP addresses, page requests	US
Sentry	Error monitoring and diagnostics	Error reports, which can include user identifiers and request context	US

Communication channels

Used for the channels a tenant operates.

Service	What it does	Data it can process	Where
Mailgun (Sinch)	Inbound and outbound email	Email addresses, message content, attachments	EU
Twilio	Voice calls, SMS and call routing	Phone numbers, call audio, recordings, SMS content	US
Vonage	SMS delivery and one-time passcodes	Phone numbers, message content	US
LiveKit	Real-time voice media for AI voice calls	Live call audio, transcripts	US

AI processing

Used when a tenant runs an AI Agent Stack, AI voice, or AI assistance for agents.

Service	What it does	Data it can process	Where
OpenAI	Language model responses and search indexing	Conversation content, knowledge base content	US
Anthropic	Language model responses	Conversation content	US
Jina AI	Ranking of knowledge base search results	Customer questions, knowledge base extracts	EU
AssemblyAI	Speech-to-text for voice calls (through LiveKit)	Call audio, transcripts	US
Speechmatics	Speech-to-text for Nordic languages and call recordings	Call audio, transcripts	UK
ElevenLabs	Text-to-speech for AI voice (through LiveKit)	Reply text, generated audio	US

Supporting services

Service	What it does	Data it can process	Where
Loops	Product and onboarding email to platform users	Name and email address of tenant users	US
ip-api	Location lookup for sign-in security monitoring	IP addresses of tenant users	EU

Services you connect yourself

When you connect your own accounts to Atender — WhatsApp and Messenger, Amazon, Google Business Profile, Trustpilot, Slack, task tools, or your own systems through our capabilities and API — data flows to those services because you asked for it. Those providers are your processors, not ours, and are not listed above.

International transfers

Your conversation data is stored in the European Union. Where a service above processes data outside the European Economic Area, the transfer rests on an approved safeguard in our agreement with that provider — the EU Standard Contractual Clauses, or an adequacy decision such as the EU-US Data Privacy Framework.

Changes

We update this page before a new sub-processor starts processing your data. You may object in writing within 30 days of the update, as set out in our data processing agreement; if you do not object within that period, the change is treated as accepted.

Want these updates by email?

Ask us, and we tell you before a new sub-processor starts.

privacy@mail.atender.com