How many subprocessors does Aircall use?

Aircall lists 25 subprocessors on its published list, including Amazon Web Services, Twilio, Ribbon, ClickHouse, and Pinecone and 20 more.

Where does Aircall process customer data?

The subprocessors named by Aircall are located in USA, Germany, United Kingdom, Australia Hosting of Aircall product data, Australia for selected data types., and France and 10 other locations, as stated on its list.

How quickly does Aircall report a personal data breach to customers?

According to its DPA, Aircall reports a personal data breach to customers within 24 hours: “Where a European Data Protection Law applies, Aircall will notify Customer no later than 24 hours after such detection.”

How much notice does Aircall give before adding a subprocessor?

Aircall's DPA gives 10 days' notice of a new subprocessor, the time customers have to object: “In case Customer does not send any objection to Aircall in writing within ten (10) business days from receiving the information, it will be deemed to have agreed to the new Subprocessors.”

How does Aircall transfer personal data outside the EU?

Aircall's DPA relies on standard contractual clauses and the EU–US Data Privacy Framework: “the EU Standard Contractual Clauses for Data Transfers to Third Countries will apply and are hereby incorporated to this DPA”

Does Aircall have a SOC 2 Type II report?

Yes. Aircall's trust page lists a SOC 2 Type II report: “Aircall is SOC2 Type 2 compliant”

Which security certifications does Aircall list?

Aircall's trust page lists SOC 2 Type II.

When was Aircall's subprocessor list last checked?

ClauseTrail last checked Aircall's subprocessor list on September 29, 2026. Lists are re-checked daily.

How do I find out when Aircall adds or removes a subprocessor?

ClauseTrail monitors Aircall's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Aircall Subprocessors List (September 2026): Changes and History

Aircall names 25 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked September 29, 2026 Official source ↗

Aircall subprocessors (September 2026)

#	Subprocessor	Purpose	Location
1	Amazon Web Services	Hosting of all data in Aircall product.	USA, Germany, Australia Hosting of Aircall product data, primarily in the United States, with regional storage in the EU, Australia for selected data types.
2	Twilio	Voice transmission services. Twilio provides services that allow switching calls between the PSTN and VoIP environment. Every call made via Aircall is transmitted to Twilio.	USA
3	Ribbon	Call authentication/verification, call security and call-routing control. Ribbon provides services that protect and secure real-time communications via Aircall and ensures calls in certain countries are duly authenticated/verified.	USA
4	ClickHouse	Data analytics and data processing services. ClickHouse provides database and data processing infrastructure used to analyze platform metrics and operational usage data.	USA
5	Pinecone	Storage and retrieval of vector embeddings to support AI-powered search and the customer knowledge base within the Aircall product.	USA, Ireland
6	Datadog	Monitoring for provided services/security purposes. The security tracking software provided by Datadog monitors our customers' activity (including automated access to personal data) in the Aircall system for the detection of potential security threats and generates security alerts for our teams. If a security violation is detected, we inform you accordingly. This activity is essential for preventing and potentially detecting cyberattacks and thus for Aircall’s protection of your data and the provision of our service in the required and contracted quality.	USA
7	Atlassian	—	USA
8	Zendesk	—	USA, Ireland The Personal Data is hosted in Ireland in accordance with Zendesk’s Regional Data Hosting Policy. Zendesk, its Sub-processors may process Personal Data in countries that are outside of the EEA, United Kingdom, Switzerland if such non-European Countries processing is necessary to provide support-related or other requested services.
9	Intercom	—	USA
10	PartnerHero	—	USA, Romania
11	Pusher	—	USA, UK
12	Rudderstack	—	USA
13	Looker	—	Germany
14	Startree	—	USA
15	Microsoft Azure	Generation of conversation insights (Call summarisation, Key topics list, Talk ratio etc.) from voice transcriptions. Provision of inputs for AI Voice Agent	USA
16	Deepgram	Generation of transcription from call recordings	USA
17	ElevenLabs	Provision of inputs for AI Voice Agent	USA
18	AssemblyAI	Generation of transcription from call recordings	USA
19	Cartesia AI	Provision of inputs for AI Voice Agent	USA
20	Firecrawl	Retrieval and processing of customer provided source data to support customer created knowledge base within the Aircall product.	USA
21	Aircall.io, Inc.*	—	USA
22	Aircall SAS*	—	France
23	Aircall Telecom SL	—	Spain
24	Aircall UK Ltd*	—	United Kingdom
25	Aircall Telecom India Private Limited	—	India

Get an email when Aircall changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Aircall free

Key DPA terms at Aircall

What Aircall's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification: Within 24 hours

“Where a European Data Protection Law applies, Aircall will notify Customer no later than 24 hours after such detection.”
DPA, aircall.io ↗
Notice of a new subprocessor: 10 days ahead

“In case Customer does not send any objection to Aircall in writing within ten (10) business days from receiving the information, it will be deemed to have agreed to the new Subprocessors.”
DPA, aircall.io ↗
Transfers outside the EU: Standard contractual clauses and the EU–US Data Privacy Framework

“the EU Standard Contractual Clauses for Data Transfers to Third Countries will apply and are hereby incorporated to this DPA”

“Aircall commits to subject the Processing of Personal Data to the EU-U.S. DPF or respectively the Swiss-U.S. DPF and adhere to the DPF Principles with regard to the processing of Personal Data”
DPA, aircall.io ↗
Customer data after the contract ends: Deleted within 30 days of the contract ending

“Aircall will permit the Customer to export the Personal Data Processed under this DPA, at its expense, in accordance with the capabilities of the Service, within the period of thirty (30) days following such termination.”
DPA, aircall.io ↗
Audit rights: Once a year

“The Customer shall conduct the audit at maximum once in any twelve month period, unless Applicable Data Protection Laws require more frequent audits.”
DPA, aircall.io ↗

Certifications at Aircall

What Aircall's trust page lists, with the text each one comes from. SOC 2 Type I or Type II: what's the difference?

SOC 2 Type II: Active

“Aircall is SOC2 Type 2 compliant”
Trust page, aircall.io ↗

Documents we track for Aircall

DPA: checked September 28, 2026 aircall.io ↗
Privacy policy: checked September 28, 2026 aircall.io ↗
Subprocessor list: checked September 29, 2026 aircall.io ↗
Trust page: checked September 29, 2026 aircall.io ↗

Change history

Tracking since September 29, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Aircall subprocessors FAQ

How many subprocessors does Aircall use?: Aircall lists 25 subprocessors on its published list, including Amazon Web Services, Twilio, Ribbon, ClickHouse, and Pinecone and 20 more.
Where does Aircall process customer data?: The subprocessors named by Aircall are located in USA, Germany, United Kingdom, Australia Hosting of Aircall product data, Australia for selected data types., and France and 10 other locations, as stated on its list.
How quickly does Aircall report a personal data breach to customers?: According to its DPA, Aircall reports a personal data breach to customers within 24 hours: “Where a European Data Protection Law applies, Aircall will notify Customer no later than 24 hours after such detection.”
How much notice does Aircall give before adding a subprocessor?: Aircall's DPA gives 10 days' notice of a new subprocessor, the time customers have to object: “In case Customer does not send any objection to Aircall in writing within ten (10) business days from receiving the information, it will be deemed to have agreed to the new Subprocessors.”
How does Aircall transfer personal data outside the EU?: Aircall's DPA relies on standard contractual clauses and the EU–US Data Privacy Framework: “the EU Standard Contractual Clauses for Data Transfers to Third Countries will apply and are hereby incorporated to this DPA”
Does Aircall have a SOC 2 Type II report?: Yes. Aircall's trust page lists a SOC 2 Type II report: “Aircall is SOC2 Type 2 compliant”
Which security certifications does Aircall list?: Aircall's trust page lists SOC 2 Type II.
When was Aircall's subprocessor list last checked?: ClauseTrail last checked Aircall's subprocessor list on September 29, 2026. Lists are re-checked daily.
How do I find out when Aircall adds or removes a subprocessor?: ClauseTrail monitors Aircall's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.