Subprocessor List
Last modified: October 3rd, 2023.
About this Subprocessor List
On this page, you may learn more about the entities engaged by Aircall to carry out the processing of personal data on its customers' behalf (referred to as "Subprocessors") in compliance with the applicable data protection (privacy) laws and the Data Processing Agreements concluded between Aircall and its customers (the “DPA”).
Which entities qualify as Aircall’s Subprocessors?
In order to offer our services in the contracted scope and quality, Aircall hires and works with carefully selected third-party entities — the third-party Subprocessors. Furthermore, the Aircall contracting entity engages other entities from the Aircall group —the intra-group Subprocessors— in the processing of its customers’ data for the same reason. An entity qualifies as Aircall’s Subprocessor if under the applicable data protection (privacy) laws: (i) Such entity has or may have access to personal data processed by Aircall on behalf of all or some of its customers; (ii) Such entity has been engaged by Aircall to provide a service necessary for the provision of Aircall’s services; and (iii) The engagement of such an entity has been authorized by Aircall’s customers by means of the process described in the DPA. |
How does Aircall select its third-party Subprocessors?
Aircall maintains a strict internal procedure for the careful selection of a proposed third-party Subprocessor. The procedure always includes a detailed review of the third-party Subprocessor’s information security and privacy practices, both before its onboarding and during its engagement. Aircall’s third-party Subprocessors must ensure the same level of protection for personal data shared with them as the level to which Aircall commits toward its customers. |
What are the Subprocessors’ contractual commitments in relation to the protection of personal data?
Where Aircall engages Subprocessors, it does so by way of a contract that imposes on the Subprocessor the same obligations as the ones imposed on Aircall under the DPA. Aircall ensures that the Subprocessor complies with the obligations to which Aircall, as the data processor, is subject pursuant to the DPA and applicable data protection laws. Therefore, the same level of protection for personal data shared with any Subprocessor is granted. |
Aircall’s authorization to engage the Subprocessors
By executing the DPA, the customer grants Aircall a general authorization to engage new Subprocessors, add, or replace the Subprocessors in the list (unless specifically agreed otherwise between a particular customer and Aircall). |
Aircall’s process for implementing changes in the list of Subprocessors
In case the list of Subprocessors is modified by Aircall, the customer will be informed of any intended changes via email notification sent to the address(es) associated with the customer’s account. Aircall sends the notification to the email addresses of all admin users of the customer’s account. We also provide the option to subscribe with additional email address(es) as recipients of the notification herein below. To the extent permitted by the DPA, the customer may reasonably object to the modification of the list of Subprocessors. In case the customer does not send any objection to Aircall in writing within ten (10) days of receiving the information (or within a different period of time specifically agreed between Aircall and the customer), the modifications will be deemed accepted by the customer. If the customer objects, the customer and Aircall will negotiate to find a solution that will satisfy both parties’ interests. |
Subscribe additional email address(es)
Insert an email address to receive notifications about changes in the list of Subprocessors.
Previous versions
The list of third-party Subprocessors
Infrastructure
Name | Legal name | Contact details | Processing activities | Country of processing | Website |
Amazon WebServices | AMAZON WEB SERVICES, INC. | Hosting of all data in Aircall product. | USA | ||
Twilio | Twilio, Inc. | Voice transmission services. Twilio provides services that allow switching calls between the PSTN and VoIP environment. Every call made via Aircall is transmitted to Twilio. | USA |
Security
Name | Legal name | Contact details | Processing activities | Country of processing | Website |
Datadog | Datadog, Inc. | Monitoring for provided services/security purposes. The security tracking software provided by Datadog monitors our customers' activity (including automated access to personal data) in the Aircall system for the detection of potential security threats and generates security alerts for our teams. If a security violation is detected, we inform you accordingly. This activity is essential for preventing and potentially detecting cyberattacks and thus for Aircall’s protection of your data and the provision of our service in the required and contracted quality. | USA | ||
IPSIP | IPSIP LTD | Via contact form: https://www.ipsip.eu/fr/contact | Technical support: 24/7 security and quality incidents handling. The company IPSIP monitors alerts in the system related to security and quality issues. When spotting an issue, IPSIP communicates the issue to Aircall’s dedicated team (Aircall customers are NOT expected to communicate with IPSIP directly). This allows us to readily react to any issue 24/7. In line with data-minimization principle, IPSIP only has access to security logs from the system. The security logs may contain exclusively pseudonymized personal data. | Vietnam |
Customer Support
Processing activities: Ticketing & chatbot systems for assistance. These Subprocessors process personal data only if a ticket for Customer Support is filed (or a chat conversation is initiated by an identified Aircall user) and to the extent personal data is shared by the customer in the ticket (chat conversation).
Name | Legal name | Contact details | Country | Website |
Atlassian | Atlassian Pty Ltd | USA | ||
Zendesk | Zendesk, Inc. | Ireland / USA The Personal Data is hosted in Ireland in accordance with Zendesk’s Regional Data Hosting Policy. Zendesk and its Sub-processors may process Personal Data in countries that are outside of the EEA, United Kingdom, and Switzerland if such non-European Countries processing is necessary to provide support-related or other requested services. | ||
Intercom | INTERCOM R&D UNLIMITED COMPANY | USA |
Data tools
Processing activities: Data visualization and sync. The technology provided by the data visualization and synchronization tools (Pusher, Looker, and Segment) allows us to visualize call history, calculate analytics, etc., in the customers' dashboards, which is essential to provide the Aircall service. For that purpose, we need to share most of the "raw" data (including personal data) generated in the Aircall system and allow these tools to process them.
Name | Legal name | Contact details | Country of processing | Website |
Pusher | Pusher Ltd | UK / USA | ||
Segment | Segment.io, Inc. | USA | ||
Looker | Looker Data Sciences, Inc. | Germany |
Error-tracking tools
Processing activities: The error-tracking software monitors our customers' activity in the Aircall system to spot "bugs" in the system, which are then fixed by Aircall's engineering teams. This is essential to make sure that Aircall services are running correctly and that we provide services of the required quality. For that purpose, we need to share the personal data generated in the Aircall system and allow these tools to process them.
Name | Legal name | Contact details | Country of processing | Website |
Rollbar | Rollbar, Inc. | USA | ||
Sentry | Functional Software, Inc | USA |
Integrations
Name | Legal name | Contact details | Purpose | Country of processing | Website |
Tray | Tray.io, Inc. | Integrating tool for certain apps. Processes personal data only if the affected app is integrated | USA |
AI Features tools
Processing activities: The conversation analysis and insight. Personal data is processed only if you subscribe for AI Features. The AI-powered tool (Microsoft Azure OpenAI) allows us to provide you with a deeper understanding of your conversations by generating conversation insights (Call summarisation, Key topics list, Talk ratio etc.) from voice transcriptions in the customer dashboard's Conversation Center. For that purpose, we need to share voice transcriptions (including personal data) created in the Aircall system and allow AI Feature tools to process them.
Name | Legal name | Contact details | Country of processing | Website |
Microsoft Azure | Microsoft Corporation | Via contact form: https://www.microsoft.com/en-us/concern/privacy/ | USA |
The list of intra-group Subprocessors
Your Aircall
contracting entityBy “contracting entity” we mean the Aircall legal entity identified in the respective part of the Agreement (Order Form, Terms of Use, Master Subscribtion Agreement). It is the Aircall legal entity that enters into the legal agreement with your company.
engages the following Aircall intra-group Subprocessors for the processing of personal data on your behalf:
Aircall Entities
Legal Name | Country of Processing |
Aircall.io, Inc.* | USA |
Aircall SAS* | France |
Aircall Telecom SL | Spain |
Aircall PTY LTD* | Australia |
Aircall UK Ltd | United Kingdom |
Aircall Telecom India Private Limited | India |
*) The Aircall entity is not engaged as a Subprocessor if it is your contracting entity.
The intra-group Subprocessors are engaged in the processing activities within the provision of Aircall’s product and services. Each of the intra-group Subprocessors’ employees may remotely access the personal data in a customer’s account if needed for troubleshooting, number porting, or debugging and related engineering activities.
You may contact the intra-group Subprocessors via email at privacy@aircall.io and you may find more information about the entire Aircall group’s privacy practices at this website aircall.io.