Retour à l'accueil
Document juridique
Registre des sous-traitants ultérieurs
Les tiers auxquels handlo.ai fait appel pour traiter les données personnelles, tenu à jour conformément aux articles 28 et 30 du RGPD.
Dernière mise à jour : 14 juin 2026|En vigueur : 14 juin 2026
Ces documents juridiques sont officiellement publiés en anglais. Les versions traduites arriveront bientôt — en attendant, le texte anglais ci-dessous fait foi.
Le tableau suivant répertorie les sous-traitants ultérieurs auxquels handlo.ai fait appel pour traiter les données personnelles pour le compte de ses clients, y compris la finalité, les catégories de données, le lieu d'hébergement et le mécanisme de transfert légal.
| Sous-traitant ultérieur | Finalité | Catégories de données | Lieu d'hébergement | Mécanisme de transfert |
|---|---|---|---|---|
| Supabase, Inc. | Primary database and file storage | Contact identifiers, Call data, AI-generated data, Account data | European Union (Frankfurt / AWS eu-central-1) | EU hosting — no transfer outside the EEA |
| Vapi.ai | AI voice call processing and the managed speech pipeline | Caller phone number, Call recording, Transcript | United States | Standard Contractual Clauses (Module 3) |
| OpenAI, L.L.C. | Embeddings, summarization, and AI content generation | Transcript, Knowledge-base content, AI-generated data | United States | Standard Contractual Clauses (Module 3) |
| Twilio Inc. | Phone infrastructure, WhatsApp message transport (BSP), and phone-number reputation (Lookup) | Caller phone number, Notification content | United States | Standard Contractual Clauses (Module 3) |
| Telnyx LLC | Phone infrastructure | Caller phone number | United States | Standard Contractual Clauses (Module 3) |
| Deepgram, Inc. | Speech-to-text transcription (engaged via Vapi) | Call audio, Transcript | United States | Standard Contractual Clauses (Module 3); engaged via Vapi |
| ElevenLabs, Inc. | Text-to-speech voice synthesis (engaged via Vapi) | Assistant speech content | United States | Standard Contractual Clauses (Module 3); engaged via Vapi |
| Cartesia AI | Text-to-speech voice synthesis (engaged via Vapi) | Assistant speech content | United States | Standard Contractual Clauses (Module 3); engaged via Vapi |
| Microsoft Azure | Text-to-speech / speech-to-text for select languages (engaged via Vapi) | Assistant speech content, Call audio | United States / European Union (region managed by Vapi) | Standard Contractual Clauses (Module 3); engaged via Vapi |
| Meta Platforms, Inc. | WhatsApp platform / notification delivery | Caller phone number, Notification content | United States | Standard Contractual Clauses (Module 3) |
| Telegram Messenger Inc. | Telegram notification delivery to the Customer's own Telegram chat (only when the Customer enables it) | Notification content | Outside the EEA | At the Customer's instruction — the Customer selects Telegram as its own notification channel |
| Stripe, Inc. | Payment processing (Stripe acts as an independent controller for payment data) | Billing contact, Payment metadata | United States | Standard Contractual Clauses (Module 3); Stripe's own controller-level safeguards apply |
| Resend, Inc. | Transactional email delivery | Recipient email, Notification content | United States | Standard Contractual Clauses (Module 3) |
| Functional Software, Inc. (Sentry) | Error monitoring and diagnostics (processes only Handlo diagnostic data) | IP address, Diagnostic metadata | United States | Standard Contractual Clauses (Module 3) |
| Upstash, Inc. | Rate limiting and short-lived caching | Caller phone number, Cached assistant configuration, Transient call-session data, Aggregated analytics | European Union | EU hosting — no transfer outside the EEA |
| Google LLC | Calendar integration and Google Drive document ingestion (when enabled) | Calendar event data, Document content, Account data | United States | Standard Contractual Clauses (Module 3) |
| Microsoft Corporation | OneDrive & SharePoint document ingestion (when enabled) | Document content, Account data | United States / European Union | Standard Contractual Clauses (Module 3) |
| HighLevel, Inc. (GoHighLevel) | CRM sync to the Customer's connected GoHighLevel account (when enabled) | Contact identifiers, Lead / opportunity data, Call summary | United States | Standard Contractual Clauses (Module 3) |
| HubSpot, Inc. | CRM sync to the Customer's connected HubSpot account (when enabled) | Contact identifiers, Lead / deal data, Call summary | United States | Standard Contractual Clauses (Module 3) |
| IPQualityScore, Inc. (IPQS) | Caller phone-number reputation / spam scoring (Growth and Business tiers) | Caller phone number | United States | Standard Contractual Clauses (Module 3) |
| PostHog, Inc. | Product analytics (consent-gated; ingest reverse-proxied via /ingest) | Usage / event data, IP address, Pseudonymous user identifier | European Union | EU hosting — no transfer outside the EEA |
| Railway Corp. | Background worker / job-processing compute (exports, recordings, transcripts) | Contact identifiers, Call data, AI-generated data, Account data | European Union (europe-west4) | EU hosting — no transfer outside the EEA |
| Crisp IM SAS | Support live-chat widget | Contact identifiers, Support message content, IP address | European Union (France) | EU hosting — no transfer outside the EEA |
Nous informerons les clients au moins 30 jours avant d'ajouter un nouveau sous-traitant ultérieur, comme prévu dans notre Avenant relatif au traitement des données.