Subprocessors

To run agenthelp we rely on a small set of trusted service providers (“subprocessors”). Each acts only on our instructions under a data-protection agreement; none are data brokers, and none sell your data. This is the complete current list — it matches the providers named in our Privacy Policy. We'll update this page before adding a new one.

• Anthropic

  Generates the assistant's replies (chat and phone).

  What it sees: Chat/voice messages, your business setup, and customer details typed during a booking.

  Contractually prohibited from training its models on your data (commercial API).

• Vapi

  Powers the AI phone line.

  What it sees: Call audio, transcripts, the caller's number, and your business setup.

  Processes calls to run the phone line; recordings/transcripts live here, not in our database.

• Twilio

  Provides phone numbers and sends text messages.

  What it sees: Phone numbers and message contents (verification codes and appointment reminders).

  Standard processor terms; may use limited data for abuse detection, not general training.

• Stripe

  Processes subscription payments.

  What it sees: Your (the business owner's) billing details. No customer data; card numbers never touch us.

  PCI-DSS Level 1; does not train on your data.

• Resend

  Delivers our service emails.

  What it sees: Recipient email + the contents of booking confirmations and reminders.

  Transactional email relay under a standard processor agreement.

• Upstash

  Runs rate-limiting that protects the service from abuse.

  What it sees: Counters and IP addresses — no customer profiles.

  Cache/counter service; low data sensitivity.

• Sentry

  Collects error reports so we can fix problems.

  What it sees: Technical error details; configured with a filter that strips personal information.

  Observability only; does not train on your data.

• Neon

  Hosts the database.

  What it sees: All primary data, encrypted at rest (AES-256).

  Database host; SOC 2 Type II + ISO 27001/27701.

• Vercel

  Hosts the application.

  What it sees: HTTP and function logs — not the database contents.

  Application platform; SOC 2 Type 2 + ISO 27001.

See our Trust & Security page for the plain-English version, or email security@getagenthelp.com.