AvenDesk

Subprocessors

Who else
hears it.

An AI receptionist is a chain of companies, not one of them. This page names every link in that chain, what it does, and what your callers' words look like by the time they reach it.

Last updated 18 August 2026

The short version

  • Five companies are in the path of every single call — the carrier, the speech recogniser, the router, the language model and the voice. There is no version of the service without them.
  • We have no negotiated agreement with any of them. Each is used on its own published terms. They may use what passes through, and they may sell it — §2 is the honest version.
  • Two more are standby only and receive nothing unless the one above them fails mid-call.
  • No payment processor, no analytics, no advertising. Card details are checked and discarded here, and this site carries no tags at all.
  • Your own connected accounts are not on this list — your calendar and your mailbox are yours, reached with access you granted and can revoke.
  • We update this page before a new one starts, and if you object to it you can leave with the rest of your month refunded.

This summary is for orientation only. It is not part of the agreement, and where it differs from the numbered sections below, the numbered sections are what applies.

The register

Everyone who touches it.

On every call

These are the call itself. A telephone call cannot be answered, understood, thought about or spoken back without each of them, so there is no version of the service where your callers' words do not pass through all of them.

Telnyx

United States

Carries the calls and the text messages, and issues the telephone numbers.

Sees The caller's number, your number, the live audio of the call, and the content of every text.

AssemblyAI

United States

Turns what the caller said into text, while they are still saying it.

Sees The live audio of the call.

OpenRouter

United States

Routes each turn of the conversation to the language model that composes the reply.

Sees The conversation so far, as text, and the business profile the receptionist is working from.

OpenAI

United States

The language model itself, reached through OpenRouter above.

Sees The same conversation text OpenRouter passes on.

Fish Audio

United States

Speaks the reply in your receptionist's voice.

Sees The words the receptionist is about to say. Never the caller's audio.

Standby, and only on a failure

Nothing reaches these unless the provider above has stopped answering mid-call. They are listed because a register that only describes the good day is not a register — but on an ordinary day they receive nothing at all.

Deepgram

United States

Speech recognition, if AssemblyAI is unavailable.

Sees The live audio of the call, for as long as the failover lasts.

DeepSeek

China

The last language model in the chain, if OpenRouter and OpenAI have both failed.

Sees The conversation text, for as long as the failover lasts.

Running the platform

Where the service, and everything it has stored, actually live.

Railway

United States

Hosts the platform and the database behind your portal.

Sees Everything the service holds, at rest — bookings, customers, transcripts, recordings, settings.

Vercel

United States

Hosts this website.

Sees Requests to those sites. No portal data and no call data passes through it.

Google, for email delivery

United States

Sends the confirmations, alerts and receipts the service emails on your behalf.

Sees The recipient's address and the content of the message — which for a booking confirmation means your customer's name and their appointment.

Sentry

United States

Records a crash so we can find out what broke, where error monitoring is switched on.

Sees The technical detail of a failure and the request that caused it, which can incidentally include personal data that was in that request.

Around the edges

These touch your business's own information rather than your callers'. They are here because the line between the two is exactly the thing a register is for.

The Campaign Registry, through Telnyx

United States

Registers your business to send text messages under 10DLC, as US carriers require.

Sees Your business registration details — the legal name, address, tax number and contact you gave us. No message content, no caller data.

Outscraper, SerpAPI and Google Maps

United States

Read public review and listing data about your business and the competitors near you.

Sees Public search and listing data. Nothing of yours goes out beyond the business name and location being looked up.

What this page is

A subprocessor is a company we use to deliver the Services that ends up handling personal information you or your callers gave us. The register above names every one of them, what it does, and what it can see.

It exists because the alternative is asking you to take our word for it. An AI receptionist is not one company answering your phone — it is a carrier, a speech recogniser, a language model and a voice, in a chain. A business deciding whether to put its customers through that chain is entitled to know who is in it before it signs, not after.

This page is the list our Data Processing Addendum means when it says "our subprocessors", and §4 is the notice promise that Addendum relies on.

The part most lists leave out

We have no negotiated data-processing agreement with any company in that register. We use each of them on their own published terms, as an ordinary paying customer — the same relationship you have with us.

A subprocessor list is normally read as proof that such agreements exist: that each provider has been bound to process data only on instruction, not to train on it, and not to sell it. In our case it does not prove that. It proves who is in the chain. What each of them may then do with what passes through is governed by their terms, not by ours.

They may use it, and they may sell it. We do not know that they do not, and we will not tell you otherwise. This is the single most important limitation on everything else we publish. It is stated the same way in our Privacy Policy and in the Addendum, and it is stated here rather than left for you to infer from a document that reads as though it were covered.

If your compliance file needs a signed agreement standing behind every provider, this service cannot give you one today — and that is worth knowing before you sign up rather than at your first audit.

Who is deliberately not on it

No payment processor. Card details entered in your portal are checked and discarded in our own systems. What is kept is the card brand, the last four digits and the expiry date, which is what the portal shows you so you know which card is on file. No third party receives them, so there is nobody to name.

No analytics, advertising or tracking company, on this website or in your portal. There are no tags to list because there are none, and on this site your browser is now instructed to refuse them.

Nothing you connected yourself. Your calendar, your mailbox, your Google Business Profile, your CRM — those are your accounts, reached with access you granted and can revoke, inside the scopes you granted. We treat them as yours rather than as ours to appoint, which is why they are not subprocessors and why revoking one stops the feature that used it immediately.

When this list changes

We will update this page before a new subprocessor starts handling customer data, and the date at the top is when it last changed. Email Flowonnco@gmail.com with "Subprocessors" in the subject and we will tell you in advance, each time.

If you object to a new one, tell us and you may close your account without penalty, with the unused part of your month refunded. We are not going to pretend that one small business can veto our speech provider. What we can honestly offer is notice, and the ability to leave before it takes effect rather than after.

Ask

Anything here unclear?

If you need to know exactly what one of these receives, or you want telling in advance when the list changes, email us and say so. If a provider on it is one your own rules will not allow, tell us before you sign up rather than after.

Flowonnco@gmail.com

At a glance

In every call
5 providers
Standby only
2 providers
Processing region
United States, except DeepSeek
Negotiated DPAs
None with any of them
Payment processor
None engaged
Notice of a change
Before it takes effect
Last updated
18 August 2026

Read alongside our Data Processing Addendum and Privacy Policy.