DRAFT — pending legal review. These documents are not final and are not yet in effect. Questions: privacy@torklio.com
Subprocessor List
=================

SOURCE: Torklio Interim Legal Package v1.0 (owner-prepared interim draft, 2026-09-03). DRAFT - attorney review required; bracketed [FIELDS] must be completed and every statement verified against production before any effective date is set. Loaded into the legal center 2026-09-03.

Subprocessor List

Providers that may process data to operate Torklio

PUBLICATION CONTROL  Effective date: [PUBLICATION DATE]. Replace all red bracketed fields and verify the text against production before publication. Internal status: attorney review required.



Last updated: September 3, 2026. Customer authorizes the providers below as described in the Terms and DPA. Actual legal entities, processing locations, applicable services, and provider data terms must be verified before publication. Conditional providers should be removed if not enabled in production.

Provider

Purpose

Data categories

Status

DigitalOcean

Hosting, compute, storage, networking, backups

Account data, Customer Content, application files, logs, backups

Active

Twilio

Inbound telephone, call routing, media transport; SMS when enabled

Phone numbers, caller ID, call audio/media, call metadata, message content and delivery data

Voice active; SMS gated

OpenAI

Realtime AI voice, language processing, transcription or response generation

Live call audio, transcripts, prompts, business instructions, generated responses

Active

Anthropic

Chat, summarization, classification, CRM or quality workflows

Chat text, transcripts, business instructions, summaries, customer-interaction text

Active

ElevenLabs

Synthetic speech and voice output

Text to be spoken, generated voice audio, technical metadata

Active where configured

Deepgram

Speech recognition or transcription

Call audio, transcripts, technical metadata

Conditional - verify

Google

Sign-in and Google Calendar integration

Account identity, OAuth tokens, calendars, events, availability, attendee information

Active where connected

Microsoft

Microsoft identity and calendar integration

Account identity, OAuth tokens, calendars, events, availability, attendee information

Conditional - verify

Resend

Transactional email delivery

Email addresses, names, message content, delivery metadata

Active

Stripe

Subscription billing and hosted payment processing

Billing identity, transaction and subscription metadata; payment details handled by Stripe

Active or launch-gated - verify



Change notice

Torklio may update this list as providers or features change. Notices of material additions will be provided through email to account owner contacts and an update to the Subprocessor page. Questions or objections may be sent to privacy@torklio.com within 30 days.

Provider safeguards

Torklio evaluates provider access based on the service performed, data involved, available contractual protections, security information, and operational need. Inclusion on this list does not mean every provider receives every category of data. Data is routed according to enabled features and configuration.

← Legal Center