Authorized Subprocessors List
Last updated: 20 September 2026 · UK GDPR & Data Protection Act 2018 Compliance
To provide autonomous AI agents, voice receptionists, and managed automation pipelines, amoskalets.com engages third-party infrastructure and service providers ("Subprocessors"). Each subprocessor is evaluated for technical security, privacy controls, and compliance with applicable UK data protection legislation.
Providers marked "to be confirmed with vendor" are already live in our voice pipeline. Their contracting entity, processing locations and transfer mechanism are being confirmed in writing with the vendor; they are published here rather than left out, so nothing in the chain is hidden.
Oracle Cloud Infrastructure (OCI)
United Kingdom / European UnionCore cloud virtual machines, secure compute hosting, network perimeter, and encrypted offsite object storage backups.
PostgreSQL Database Engine
United KingdomRelational data persistence, Row-Level Security (RLS) tenant isolation, and immutable audit ledger logging.
n8n Workflow Engine
United KingdomBackground business logic execution, data transformation pipelines, and asynchronous automation tasks.
Google Gemini (Google Cloud AI)
European Union / United StatesAutonomous conversational reasoning, prompt synthesis, and intent classification for direct specialists (Emma, Bob, Peter). Zero customer training on enterprise API inputs.
Vapi, Inc. (VAPI)
United StatesReal-time Voice AI telephony orchestration, low-latency audio streaming, and voice assistant speech session management. Vapi brokers the speech-to-text, voice synthesis and language model providers listed below.
Deepgram (speech-to-text)
United States (per vendor documentation; to be confirmed for this account)Real-time speech-to-text transcription of inbound voice calls in the live voice pipeline.
ElevenLabs (voice synthesis)
United Kingdom / United States (to be confirmed for this account)Voice synthesis (text-to-speech) for the inbound voice assistant.
Anthropic (language model)
Ireland / United States (to be confirmed for this account)Language model reasoning for the voice assistant and for our own automation services.
Zadarma (Cloud PBX & SIP Trunking)
United Kingdom / European UnionOfficial UK business telephony carrier (+44 20 4577 1226), SIP trunking, and call termination.
Square (Block, Inc.)
United Kingdom / IrelandPayment processing, checkout sessions, and recurring subscription billing in GBP (£). Square publishes its own payment-security and compliance information.
Resend, Inc.
United StatesTransactional email dispatch, client verification messages, and owner operational notifications.
Subprocessor Modification & Objection Procedure
Under Section 6 of our Data Processing Addendum (DPA v1.0), amoskalets.com maintains this official versioned list of authorized subprocessors. When adding or replacing a subprocessor, we provide at least fourteen (14) days prior written notice to Controller's registered administrative contact email and update this page with a dated changelog.
Controllers may submit a written objection on reasonable data protection grounds to hello@amoskalets.com within 14 days of receiving notice.
Change Log
- 20 September 2026 — Added Deepgram, ElevenLabs and Anthropic to the voice pipeline entries; their entity, location and transfer details are marked pending written confirmation from the vendor. Vapi entry updated to record that it brokers those providers. Objection contact moved to hello@amoskalets.com.
- 27 August 2026 — Registry published: Oracle Cloud Infrastructure, self-hosted PostgreSQL, self-hosted n8n, Google Gemini, Vapi, Zadarma, Square, Resend.
A change that adds a subprocessor is notified to client administrative contacts with at least 14 days notice under Section 6 of the Data Processing Addendum.