Data & privacy
Sub-processors
VoiceLayer is operated by Hastkari LLC. · Effective October 13, 2026
This page lists the third parties VoiceLayer engages to process Customer Data on our behalf, as referenced by our Data Processing Addendum. Each is bound by data-protection obligations no less protective than the DPA.
Infrastructure
Hosting, storage, and network.
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud compute, object storage, and database hosting (self-managed Kubernetes) | United States | |
| Cloudflare | Edge network, CDN, DNS, and DDoS/WAF protection | Global edge network (US-configured) |
Communications
Telephony, messaging channels such as WhatsApp, and real-time media.
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| LiveKit | Real-time media transport and SIP session handling | United States | |
| Twilio | PSTN telephony connectivity and phone numbers | United States | |
| Meta Platforms, Inc. (WhatsApp Business Platform) | Delivery of WhatsApp messages between the WhatsApp Business numbers customers connect and the people who message them (WhatsApp Cloud API) | United States and other countries where Meta operates |
Default AI provider
Used to process Customer Data only when you use VoiceLayer-provided model, speech-to-text, or text-to-speech defaults. If you bring your own provider keys (BYOK), your chosen provider is your sub-processor, not ours.
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| OpenAI | Large-language-model reasoning (default) | United States | |
| Google (Gemini / Cloud) | Large-language-model reasoning and speech services (optional default) | United States | |
| Deepgram | Speech-to-text transcription (default) | United States | |
| AssemblyAI | Speech-to-text transcription (optional default) | United States | |
| Cartesia | Text-to-speech voice synthesis (default) | United States | |
| ElevenLabs | Text-to-speech voice synthesis (optional default) | United States |
Platform
Authentication, monitoring, analytics, and email.
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Clerk | Authentication, user identity, and organization management | United States | |
| Sentry | Error and performance monitoring | United States | |
| PostHog Inc. | Product analytics for the web dashboard | United States | |
| Amazon Simple Email Service (Amazon SES, AWS) | Email delivery — account and billing notices, and the email your agents and flows send | United States |
Not our sub-processors: BYOK providers and carriers
The following are not VoiceLayer sub-processors:
- BYOK providers. Model, speech-to-text, text-to-speech, and telephony providers that you select and configure with your own credentials act for you, not for us. You are responsible for the terms you accept with them.
- Telecommunications carriers. Downstream carriers that originate or terminate calls act as independent providers under their own terms.
Changes to this list
We will provide at least 30 days’ advance notice before adding or replacing a sub-processor that processes Customer Data. You may object on reasonable data-protection grounds within 10 days, as described in the DPA; non-objection within that window is deemed acceptance.
Contact
Questions about this document? Reach us at [email protected] or write to Hastkari LLC, 5900 Balcones Ave, STE 100, Austin, TX 78731, USA.