How many subprocessors does Avoma use?

Avoma lists 15 subprocessors on its published list, including AWS, Twilio, Deepgram, Rev, and OpenAI and 10 more.

Where does Avoma process customer data?

The subprocessors named by Avoma are located in United States of America, as stated on its list.

How quickly does Avoma report a personal data breach to customers?

According to its DPA, Avoma reports a personal data breach to customers without undue delay, with no set deadline: “Avoma, Inc. will maintain security incident management policies and procedures and will, to the extent permitted by law, promptly notify Customer, without undue delay, of any actual or reasonably suspected unauthorized access to, acquisition of, or disclosure of Customer Personal Data”

How much notice does Avoma give before adding a subprocessor?

Avoma's DPA gives 5 days' notice of a new subprocessor, the time customers have to object: “Customer may object to the Processing of Customer's Personal Data by the New Sub-Processor, for reasonable and explained grounds, by providing a written objection to security@avoma.com within 5 business days following Avoma's written notice to Customer of the intended engagement with the New Sub-Processor.”

How does Avoma transfer personal data outside the EU?

Avoma's DPA relies on standard contractual clauses and the EU–US Data Privacy Framework: “the Data Controller to Data Processor EU Model Clauses that are incorporated by reference into this DPA and apply to any Personal Data transfers outside the EEA”

Does Avoma have a SOC 2 Type II report?

Yes. Avoma's trust page lists a SOC 2 Type II report: “SOC 2 Type II Certified”

Which security certifications does Avoma list?

Avoma's trust page lists SOC 2 Type II and ISO 42001.

When was Avoma's subprocessor list last checked?

ClauseTrail last checked Avoma's subprocessor list on September 28, 2026. Lists are re-checked daily.

How do I find out when Avoma adds or removes a subprocessor?

ClauseTrail monitors Avoma's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Avoma Subprocessors List (September 2026): Changes and History

Avoma names 15 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked September 28, 2026 Official source ↗

Avoma subprocessors (September 2026)

#	Subprocessor	Purpose	Location
1	AWS	Cloud Providers	United States of America
2	Twilio	Cloud Providers	United States of America
3	Deepgram	Transcription	United States of America
4	Rev	Transcription	United States of America
5	OpenAI	Artificial Intelligence	United States of America
6	ClickHouse	Analytics	United States of America
7	Segment	Analytics	United States of America
8	Amplitude	Analytics	United States of America
9	Google	Cloud Providers	United States of America
10	Grafana Labs	Logging and Monitoring	United States of America
11	Sentry	Error Tracking and Monitoring	United States of America
12	HubSpot	CRM	United States of America
13	Anthropic	Artificial Intelligence	United States of America
14	Baseten	AI subprocessor Artificial Intelligence	United States of America
15	Braintrust	AI subprocessor AI Observability Platform	United States of America

Get an email when Avoma changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Avoma free

Key DPA terms at Avoma

What Avoma's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification: Without undue delay, with no set deadline

“Avoma, Inc. will maintain security incident management policies and procedures and will, to the extent permitted by law, promptly notify Customer, without undue delay, of any actual or reasonably suspected unauthorized access to, acquisition of, or disclosure of Customer Personal Data”
DPA, www.avoma.com ↗
Notice of a new subprocessor: 5 days ahead

“Customer may object to the Processing of Customer's Personal Data by the New Sub-Processor, for reasonable and explained grounds, by providing a written objection to [email protected] within 5 business days following Avoma's written notice to Customer of the intended engagement with the New Sub-Processor.”
DPA, www.avoma.com ↗
Transfers outside the EU: Standard contractual clauses and the EU–US Data Privacy Framework

“the Data Controller to Data Processor EU Model Clauses that are incorporated by reference into this DPA and apply to any Personal Data transfers outside the EEA”

“Avoma, Inc. self-certifies to and complies with the Data Privacy Framework and will maintain its self-certification to and compliance with the Data Privacy Framework throughout the terms of Terms of Service.”
DPA, www.avoma.com ↗
Customer data after the contract ends: Deleted within 30 days of the contract ending

“Avoma, Inc. will return Customer Personal Data to Customer or delete such data within thirty (30) days after termination of the Services or sooner upon Customer's request.”
DPA, www.avoma.com ↗
Audit rights: Through certifications and audit reports only

“Avoma, Inc. will make available to Customer that is not a Avoma, Inc. competitor (or to a third party auditor on Customer's behalf, that is not a Avoma, Inc. competitor and subject to the auditor's execution of Avoma, Inc.'s non-disclosure agreement), the then most recent version of the Avoma, Inc. Information Security Policy summaries of third-party audit or certification reports commonly made available to Avoma, Inc. Customers.”
DPA, www.avoma.com ↗

Certifications at Avoma

What Avoma's trust page lists, with the text each one comes from. SOC 2 Type I or Type II: what's the difference?

SOC 2 Type II: Active

“SOC 2 Type II Certified”
Trust page, www.avoma.com ↗
ISO 42001: Active

“ISO/IEC 42001:2023 Certified”
Trust page, www.avoma.com ↗

Documents we track for Avoma

DPA: checked September 28, 2026 www.avoma.com ↗
Privacy policy: checked September 28, 2026 www.avoma.com ↗
Subprocessor list: checked September 28, 2026 trust.avoma.com ↗
Terms of service: checked September 28, 2026 www.avoma.com ↗
Trust page: checked September 28, 2026 www.avoma.com ↗

Change history

Tracking since September 28, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Avoma subprocessors FAQ

How many subprocessors does Avoma use?: Avoma lists 15 subprocessors on its published list, including AWS, Twilio, Deepgram, Rev, and OpenAI and 10 more.
Where does Avoma process customer data?: The subprocessors named by Avoma are located in United States of America, as stated on its list.
How quickly does Avoma report a personal data breach to customers?: According to its DPA, Avoma reports a personal data breach to customers without undue delay, with no set deadline: “Avoma, Inc. will maintain security incident management policies and procedures and will, to the extent permitted by law, promptly notify Customer, without undue delay, of any actual or reasonably suspected unauthorized access to, acquisition of, or disclosure of Customer Personal Data”
How much notice does Avoma give before adding a subprocessor?: Avoma's DPA gives 5 days' notice of a new subprocessor, the time customers have to object: “Customer may object to the Processing of Customer's Personal Data by the New Sub-Processor, for reasonable and explained grounds, by providing a written objection to [email protected] within 5 business days following Avoma's written notice to Customer of the intended engagement with the New Sub-Processor.”
How does Avoma transfer personal data outside the EU?: Avoma's DPA relies on standard contractual clauses and the EU–US Data Privacy Framework: “the Data Controller to Data Processor EU Model Clauses that are incorporated by reference into this DPA and apply to any Personal Data transfers outside the EEA”
Does Avoma have a SOC 2 Type II report?: Yes. Avoma's trust page lists a SOC 2 Type II report: “SOC 2 Type II Certified”
Which security certifications does Avoma list?: Avoma's trust page lists SOC 2 Type II and ISO 42001.
When was Avoma's subprocessor list last checked?: ClauseTrail last checked Avoma's subprocessor list on September 28, 2026. Lists are re-checked daily.
How do I find out when Avoma adds or removes a subprocessor?: ClauseTrail monitors Avoma's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.