Subprocessors
Last updated 1 October 2026
These companies process personal data for Hush, each under data processing terms. Transfers to the United States are covered by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. Venues that use Hush are told before we add or replace one.
| Company | What it does | Data | Where |
|---|---|---|---|
| Vapi | Handles the phone call and runs the voice pipeline | Call audio while the call lasts, transcript, caller number | United States |
| Anthropic | The AI model that decides what to say | What the caller says, as text; the venue's information | United States |
| ElevenLabs | Speaks the replies and turns speech into text | Replies as text; call audio while the call lasts | United States |
| Deepgram | Turns speech into text | Call audio while the call lasts | United States |
| Telnyx | Provides the Hush phone numbers | Caller number, call times | United States, with EU points of presence |
| Supabase | Database and file storage | Call records, summaries, bookings and messages; venue and waitlist details | EU (Ireland) |
| Vercel | Runs the website and the service's servers | Everything above passes through it; IP addresses in logs | EU (Ireland) servers; US company |
| Resend | Sends emails (call summaries, confirmations) | Email addresses, summary text | EU (Ireland) sending region; US company |
| Our email inbox (signup alerts, your emails to us) | Emails and their contents | EU and United States |
Questions: info@hushme.io. See also calls answered by Hush and the privacy policy.