Sub-processor List
To provide high-availability AI voice agents, WhatsApp automations, and telephony, Parwal AI partners with vetted, enterprise-grade cloud and telecom infrastructure providers.
Due Diligence & Contractual Commitments
Prior to onboarding any sub-processor, Parwal AI conducts architectural reviews to evaluate security standards, data segregation, and compliance with applicable data protection laws. Each vendor is bound by data processing agreements (DPAs) that prohibit secondary model training on customer data and enforce strict confidentiality.
Subscribers can subscribe to sub-processor update notifications by contacting privacy@parwal.ai.
Active Authorized Sub-processors
11 Verified Providers| Sub-processor | Role / Purpose | Location | Data Categories | Retention Profile |
|---|---|---|---|---|
OpenAI, LLC AI Reasoning & LLM Inference | Executes real-time natural language reasoning and generates conversational voice/chat responses (gpt-4o-mini). | United States | In-flight conversational prompts, caller queries, and business knowledge excerpts. | Stateless API invocation; temporary operational/abuse logs automatically purged after up to 30 days. |
Deepgram, Inc. Speech-to-Text (STT) Recognition | Converts live telephonic speech audio into real-time text transcript streams for agent comprehension. | United States | Streaming voice audio packets during active telephone calls. | Processed in volatile memory; standard operational logs purged after up to 30 days. |
Sarvam AI Indian Language STT & TTS | Provides high-fidelity Indic speech recognition and neural text-to-speech audio rendering (Hindi, Indian English, Bulbul:v3). | India | Voice audio streams and synthetic speech generation requests. | In-flight streaming processing; temporary service logs purged per enterprise agreements. |
Vobiz Telephony & SIP Trunking | Manages carrier SIP trunks, virtual phone number provisioning, and PSTN voice call termination. | India / Global | Caller Phone Numbers (ANI/DNIS), call timestamps, call durations, and SIP signaling headers. | Telecom call detail records (CDRs) retained per regulatory telecommunication mandates. |
Meta Platforms, Inc. (WhatsApp Cloud API) Omnichannel WhatsApp Messaging | Transmits inbound and outbound automated WhatsApp Business messages, brochure media, and notifications. | United States / Global | WhatsApp phone numbers, message text, and customer media attachments. | Retained in transit by Meta per WhatsApp Business Terms and operational logging schedules. |
LiveKit, Inc. WebRTC Real-Time Media | Provides ultra-low latency WebRTC audio packet transport for voice agent web and browser sessions. | United States / Global | Encrypted real-time audio streams and WebRTC session tokens. | Ephemeral in-flight memory routing; no persistent recording stored on LiveKit relays. |
Convex, Inc. Cloud Database & State Persistence | Hosts our real-time transactional database, workspace tenant states, call logs, and conversational history. | United States / Global | Workspace configurations, custom agent prompts, call metadata, and customer contact data. | Active during customer subscription; purged upon workspace deletion or customer retention rules. |
Clerk, Inc. User Authentication & Identity | Manages user login credentials, multi-factor authentication, and secure session token generation. | United States | User email address, authenticated user ID, IP address, and session tokens. | Maintained while user account is active; deleted upon account closure. |
Cashfree Payments India Pvt. Ltd. Payment Processing Gateway | Processes payments for subscriptions, minute top-ups, and wallet balances via UPI, cards, and netbanking. | India | Billing contact details, transaction reference IDs, and payment status (PCI-DSS compliant). | Retained for 7-8 years in accordance with Indian statutory tax and financial audit requirements. |
Vercel, Inc. Edge Hosting & Application Delivery | Provides edge serverless compute, CDN asset distribution, and Next.js web application routing. | Global Edge Network | HTTP request metadata, IP addresses, browser user-agent, and edge performance telemetry. | Standard edge access and diagnostic logs purged after 30 days. |
Telegram Bot API Operational Support Alerting | Dispatches instant administrative alerts to Parwal AI engineers when a customer submits a contact inquiry. | Global | Contact form name, email, phone number, and support inquiry message. | Maintained in administrative alert queue solely for timely customer response. |
Notice of Sub-processor Modifications:
Parwal AI will provide at least thirty (30) days advance notice on this page and via email to primary workspace administrators prior to engaging any new sub-processor that processes Customer personal data. Customers may submit reasonable security objections in writing to privacy@parwal.ai within thirty (30) days of notification.