Companies / CloudTalk / Subprocessors
CloudTalk provides a cloud-based business phone system with AI voice agents, an AI dialer, conversation intelligence, messaging, and number management. It serves sales, support, recruiting, and IT teams across industries and businesses of different sizes.
Summarized from its homepage on 4 Nov 2026.
Subprocessors of CloudTalk
CloudTalk declares 13 subprocessors, including AI providers Anthropic, AssemblyAI, Deepgram, ElevenLabs, OpenAI, Google Gemini.
| Subprocessor | Purpose |
|---|---|
| Hosts our infrastructure, such as servers and storage. | |
| Anthropic processes customer's data (call transcripts) when the AI Voice Agent configuration feature is used. | |
| Speech-to-text transcription engine | |
| All information (including Service Data) contained in web traffic transmitted to and from the Services is transmitted through Cloudflare’s systems, but Cloudflare does not have access to this information. | |
| Transmits contact data, including names, email addresses, and phone numbers, to Kafka (a product of Confluent). This data is used for message relaying to other services and is stored in Kafka for one week. The data is contained in communications (call logs, SMS, contacts, agents) that our customers send through CloudTalk’s Webhook services. | |
| IT infrastructure and applications logs. | |
| Deepgram processes call recordings when voice agent features are used. | |
| Eleven Labs processes call recordings when voice agent features are used. | |
| Google processes customer’s data (call recordings) when the Speech-To-Text feature is used. | |
| Database storage for part of our data. |
3 more subprocessors
See the full list with purpose, location and first seen date.
Create a free accountWork email, no card. Already have one? Log inQuestions about CloudTalk
Certifications
| Standard | What the source says | Checked |
|---|---|---|
| ISO 27001Company's statement | “CloudTalk protects it with security controls independently audited against SOC 2 Type II and ISO 27001, strong encryption, and privacy safeguards that support GDPR, CCPA and HIPAA requirements.”The company's own statement. We have not checked an accreditation registry. | 11 Nov 2026Source |
| SOC 2 Type IICompany's statement | “CloudTalk protects it with security controls independently audited against SOC 2 Type II and ISO 27001, strong encryption, and privacy safeguards that support GDPR, CCPA and HIPAA requirements.”The company's own statement. SOC 2 has no public registry; the report itself is shared by the company, usually under NDA. | 11 Nov 2026Source |
We last read its homepage on 11 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean CloudTalk lacks it.
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.
See CloudTalk's full stack
Every vendor with its source and date, and an alert when CloudTalk adds or drops one. The same lookup works for any company.
- Every company and vendor, with its public source
- 100 API calls a month, plus MCP and the Chrome extension
- Work email only. No card, no sales call