How many subprocessors does Telnyx use?

Telnyx lists 48 subprocessors on its published list, including Google LLC, Amazon Web Services, Inc., Softlayer Technologies, Inc. (owned by International Business Machines Corporation and d/b/a IBM Cloud)International Business Machines Corporation, Microsoft, and Equinix and 43 more.

Where does Telnyx process customer data?

The subprocessors named by Telnyx are located in United States, Australia, Czech Republic, Norway, Singapore, and United Kingdom, as stated on its list.

Does Telnyx use customer data to train AI models?

According to its AI terms, Telnyx uses customer data to train AI models unless customers opt out: “Telnyx will not use Input Data or Output to train or fine-tune artificial intelligence or machine learning models made available to anyone other than Customer, except (a) with Customer's prior opt-in in writing, or (b) using data de-identified in accordance with Section 3.5 of the DPA.”

How quickly does Telnyx report a personal data breach to customers?

According to its DPA, Telnyx reports a personal data breach to customers without undue delay, with no set deadline: “notify Customer without undue delay, such notice to be delivered in accordance with Section 13 of this DPA”

How does Telnyx transfer personal data outside the EU?

Telnyx's DPA relies on standard contractual clauses, the EU–US Data Privacy Framework, and adequacy decisions: “the parties agree that the Standard Contractual Clauses, incorporated by reference to this DPA, will apply in respect of the processing of such Personal Data”

Does Telnyx have a SOC 2 Type II report?

Yes. Telnyx's trust page lists a SOC 2 Type II report: “SOC 2 Type II Compliant”

Which security certifications does Telnyx list?

Telnyx's trust page lists SOC 2 Type II, ISO 27001, ISO 27701, and PCI DSS.

When was Telnyx's subprocessor list last checked?

ClauseTrail last checked Telnyx's subprocessor list on September 28, 2026. Lists are re-checked daily.

How do I find out when Telnyx adds or removes a subprocessor?

ClauseTrail monitors Telnyx's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Telnyx Subprocessors List (September 2026): Changes and History

Telnyx names 48 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked September 28, 2026 Official source ↗

Telnyx subprocessors (September 2026)

#	Subprocessor	Purpose	Location	Data
1	Google LLC	Cloud speech recognition and text-to-speech for Voice API and AI features; email, document storage, calendars and advertising.	United States	audio, transcripts, text, phone numbers, customer contact details, personal data in documents and communications
2	Amazon Web Services, Inc.	Cloud hosting for applications and messaging; S3 storage of call detail records and recordings; Polly speech synthesis for AI features.	United States	message content, audio, submitted text, phone numbers, timestamps, call metadata
3	Softlayer Technologies, Inc. (owned by International Business Machines Corporation and d/b/a IBM Cloud)International Business Machines Corporation	Public cloud hosting of messaging platform, including signal and message processing. Storage of message content and records of communications (Dispatch API).	United States	Personal data contained in communications customers send or receive through Telnyx's messaging API services, VoIP and SMS services, message content or phone numbers
4	Microsoft	Azure infrastructure hosting, backups, logging and monitoring; Azure speech synthesis for AI features; Microsoft Advertising.	United States	hosted customer data, submitted text, generated audio, operational logs, online identifiers, IP addresses, advertising interaction data
5	Equinix	Network interconnections. Colocation data center services.	United States	—
6	PayPal	Secure payment processing services; processing of personal financial data, such as credit card details, for Telnyx's customers during transaction processing.	United States	credit card details
7	Domo, Inc.	BI & analytics, processing and visualization of business data.	United States	—
8	Cloudflare, Inc.	Provision of CDN, DDoS protection, and Internet security services; data processed could include web traffic data and potentially personal data of website visitors, such as IP addresses and user agent strings.	United States	web traffic data, IP addresses, user agent strings
9	Salesforce, Inc.	CRM for managing customer interactions; personal data processed could include customer names, contact information, purchase history, and communications with Telnyx and within the Slack platform + Software used for inter-team communication and collaboration.	United States	customer names, contact information, purchase history, communications
10	Atlassian	Software used for managing product development, tracking issues, and organizing tasks; personal data processed could include employee names, email addresses, and content related to project management and product development.	Australia	employee names, email addresses, content related to project management and product development
11	Zoom Video Communications, Inc.	Software used for video meetings, webinars, and collaborative work; personal data processed could include employee names, email addresses, video and audio content, and meeting metadata.	United States	employee names, email addresses, video and audio content, meeting metadata
12	Docusign, Inc.	Software used for digitally signing documents; personal data processed could include names, email addresses, signatures, and content of documents requiring signature.	United States	names, email addresses, signatures, content of documents requiring signature
13	Dropbox, Inc.	Cloud storage for file sharing and collaboration; personal data processed could include names, email addresses, and any data contained in files stored on Dropbox.	United States	names, email addresses, data contained in files stored on Dropbox
14	FullStory, Inc.	Software used for understanding customer interactions with digital platforms; personal data processed could include website visitor behavior, IP addresses, and potentially identifiable information captured during website interactions.	United States	website visitor behavior, IP addresses, identifiable information captured during website interactions
15	Clearbit, Inc.	Enrichment of customer profiles using public and proprietary data sources; personal data processed could include names, email addresses, job titles, social media profiles, and company information.	United States	names, email addresses, job titles, social media profiles, company information
16	Zendesk, Inc.	Management of customer support tickets and communications; personal data processed could include names, email addresses, phone numbers, and content of support communications.	United States	names, email addresses, phone numbers, content of support communications
17	Marketo, Inc.	Automation and management of marketing campaigns; personal data processed could include names, email addresses, browsing data, and interaction with marketing materials.	United States	names, email addresses, browsing data, interaction with marketing materials
18	Twilio	Collection, consolidation, and management of customer data from multiple sources; personal data processed could include names, email addresses, usage data, and browsing behavior.	United States	names, email addresses, usage data, browsing behavior
19	Intercom, Inc.	Management of customer communications and support via live chat and automated messaging; personal data processed could include names, email addresses, usage data, and content of communications.	United States	names, email addresses, usage data, content of communications
20	Zapier, Inc.	Automation tool used to connect different business applications; personal data processed could include names, email addresses, and any data transferred between connected apps.	United States	names, email addresses, data transferred between connected apps
21	Mailgun Technologies, Inc.	Service used for sending, receiving, and tracking transactional emails via API; personal data processed could include names, email addresses, and email content.	United States	names, email addresses, email content
22	Analytix Solutions LLC	Financial and accounting services for the management of the company's finances; personal data processed could include employee payroll information, vendor payment data, and other financial data.	United States	employee payroll information, vendor payment data, other financial data
23	Proofpoint, Inc.	Protection against email-based threats and ensuring compliance; personal data processed could include names, email addresses, and email content.	United States	names, email addresses, email content
24	Onfido LTD	Service used for verifying identities of customers; personal data processed could include names, addresses, identification document information, and facial biometrics.	United Kingdom	names, addresses, identification document information, facial biometrics
25	Xero Limited	Accounting software used for managing company's financial data; personal data processed could include employee payroll information, vendor payment data, and other financial data.	Australia	employee payroll information, vendor payment data, other financial data
26	The Access Group	Used for financial reporting, analysis, and forecasting, providing key financial insights and future projections for the business. Personal data processed could include financial performance data, accounting data, business metrics, and other data necessary for financial analysis and forecast generation.	Australia	financial performance data, accounting data, business metrics, other data necessary for financial analysis and forecast generation
27	Bill.com, LLC	Bill.com is used for managing accounts payable and receivable; personal data processed could include vendor and client payment data, bank account information, and related transaction details.	United States	vendor and client payment data, bank account information, related transaction details
28	Xfo Financials Inc.	Vic.ai is used for automating accounting tasks using artificial intelligence; personal data processed could include financial data, invoice data, employee payroll information, and vendor payment data.	Norway	financial data, invoice data, employee payroll information, vendor payment data
29	Dwolla Inc.	Dwolla is used as a payment platform for business transactions; personal data processed could include names, financial data, transaction data, bank account information, and payment details.	United States	names, financial data, transaction data, bank account information, payment details
30	Plaid Financial Ltd.	Plaid is used to connect with users' bank accounts to verify account holder's information, authenticate accounts, and facilitate transactions. Personal data processed could include names, financial data, bank account information, and transaction details.	United States	names, financial data, bank account information, transaction details
31	Salesloft, Inc.	Salesloft is used as a sales engagement platform to help teams set and execute on sales strategies; personal data processed could include names, email addresses, contact history, and interaction data of potential and existing customers.	United States	names, email addresses, contact history, interaction data of potential and existing customers
32	Trestle Solutions, Inc.	Identity verification and fraud prevention APIs. Processes contact information and identity attributes submitted through Telnyx identity and lookup APIs.	United States	contact information, identity attributes
33	Merge API, Inc.	Integration and synchronization of data between business systems. Processes personal data contained in records transmitted through the configured integrations.	United States	personal data contained in records transmitted through the configured integrations
34	Oracle Corporation	Cloud infrastructure and backend hosting, including storage of call detail reports, call recordings, voice samples, database backups and snapshots.	United States	communications content, call metadata, personal data contained in hosted databases
35	DigitalOcean, LLC	Infrastructure for Edge Compute runtime and storage, and GPU workloads for voice cloning and design.	United States	customer workload data, submitted text, voice samples, generated audio
36	Zenlayer, Inc.	Infrastructure supporting Edge Compute messaging, proxy services and actor-state databases. Processes customer data transmitted or stored by the hosted workloads.	United States	customer data transmitted or stored by the hosted workloads
37	OpenAI Inc.	Large language models and Whisper speech recognition for enabled AI features. Processes submitted text, prompts, audio, transcripts and generated responses that may contain personal data.	United States	submitted text, prompts, audio, transcripts, generated responses
38	Anthropic PBC	Large language models for enabled AI features. Processes prompts, transcripts and generated responses that may contain personal data.	United States	prompts, transcripts, generated responses
39	Groq LLC	Large language model inference for enabled AI features. Processes prompts, text and generated responses that may contain personal data.	United States	prompts, text, generated responses
40	Deepgram, Inc.	Real-time transcription for enabled AI features. Processes submitted audio and resulting transcripts that may contain personal data.	United States	submitted audio, resulting transcripts
41	Eleven Labs Inc.	Speech synthesis and voice generation for enabled AI features. Processes submitted text and associated audio that may contain personal data.	United States	submitted text, associated audio
42	Nanonoble Pte. Ltd.	Speech synthesis for enabled AI features. Processes submitted text and generated audio that may contain personal data.	Singapore	submitted text, generated audio
43	Cartesia AI, Inc.	Speech synthesis and voice cloning for enabled AI features, including Voice Designer. Processes submitted text, voice samples and generated audio that may contain personal data.	United States	submitted text, voice samples, generated audio
44	Hamsa AI, Inc.	Arabic voice AI in an on-premises deployment; incidental access for support and diagnostics only. Data accessible for these purposes may include recordings and transcripts.	United States	recordings, transcripts
45	ResetData Pty Ltd	Infrastructure hosting Telnyx-managed inference workloads. Processes model inputs and outputs, including prompts and generated responses that may contain customer personal data.	Australia	model inputs and outputs, prompts, generated responses
46	VSHosting s.r.o.	Infrastructure hosting large language model and embedding workloads. Processes text, prompts and embedding inputs and outputs that may contain customer personal data.	Czech Republic	text, prompts, embedding inputs and outputs
47	Hydra Host, Inc.	Infrastructure hosting large language model, embedding and voice workloads. Processes customer text, prompts, audio and model outputs that may contain personal data.	United States	customer text, prompts, audio, model outputs
48	Deep Infra Inc.	GPU infrastructure hosting Telnyx-managed model serving. Processes customer inputs and outputs that may contain personal data. This entry covers infrastructure hosting.	United States	customer inputs and outputs

Get an email when Telnyx changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Telnyx free

AI and customer data at Telnyx

What Telnyx's own documents say, with the sentence each answer comes from.

Trains AI models on customer data: Yes, unless you opt out

“Telnyx will not use Input Data or Output to train or fine-tune artificial intelligence or machine learning models made available to anyone other than Customer, except (a) with Customer's prior opt-in in writing, or (b) using data de-identified in accordance with Section 3.5 of the DPA.”
AI terms, telnyx.com ↗
Sends customer data to AI model providers: Yes

“Customer authorizes Telnyx to transmit Input Data to, and receive Output from, such Third-Party Providers as necessary to deliver the AI Services.”
AI terms, telnyx.com ↗
How to opt out: Telnyx only uses customer Input Data or Output to train models made available to others if the customer opts in in writing; otherwise only de-identified data may be used.

“except (a) with Customer's prior opt-in in writing, or (b) using data de-identified in accordance with Section 3.5 of the DPA”
AI terms, telnyx.com ↗
How long AI features keep data: Upon termination, Telnyx aims to delete customer input data and output within 30 days, though third-party providers control retention of data already sent to them.

“Telnyx will use commercially reasonable efforts to comply within thirty (30) days, except to the extent retention is required by law or for legitimate security/fraud-prevention purposes.”
AI terms, telnyx.com ↗

Key DPA terms at Telnyx

What Telnyx's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification: Without undue delay, with no set deadline

“notify Customer without undue delay, such notice to be delivered in accordance with Section 13 of this DPA”
DPA, telnyx.com ↗
Transfers outside the EU: Standard contractual clauses, the EU–US Data Privacy Framework, and adequacy decisions

“the parties agree that the Standard Contractual Clauses, incorporated by reference to this DPA, will apply in respect of the processing of such Personal Data”

“Telnyx has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework Principles”

“a European Commission or Information Commissioner's Office finding of adequacy”
DPA, telnyx.com ↗
Customer data after the contract ends: Deleted or returned when the contract ends

“Telnyx shall cease to process such personal data and will promptly arrange for its deletion on expiry or termination of the Agreement”
DPA, telnyx.com ↗
Audit rights: Once a year

“Upon Customer's written request, no more than once annually and subject to adequate confidentiality provisions, Telnyx shall, in accordance with Applicable Data Protection Laws, make available to Customer such reasonable information”
DPA, telnyx.com ↗

Certifications at Telnyx

What Telnyx's trust page lists, with the text each one comes from. SOC 2 Type I or Type II: what's the difference?

SOC 2 Type II: Active

“SOC 2 Type II Compliant”
Trust page, telnyx.com ↗
ISO 27001: Active

“ISO/IEC 27001:2022 Information Security Management System Certified”
Trust page, telnyx.com ↗
ISO 27701: Active

“ISO/IEC 27701:2019 Privacy Management System Certified”
Trust page, telnyx.com ↗
PCI DSS: Active

“PCI DSS Compliant”
Trust page, telnyx.com ↗

Documents we track for Telnyx

AI terms: checked September 28, 2026 telnyx.com ↗
DPA: checked September 28, 2026 telnyx.com ↗
Privacy policy: checked September 28, 2026 telnyx.com ↗
Subprocessor list: checked September 28, 2026 telnyx.com ↗
Terms of service: checked September 28, 2026 telnyx.com ↗
Trust page: checked September 28, 2026 telnyx.com ↗

Change history

Tracking since September 28, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Telnyx subprocessors FAQ

How many subprocessors does Telnyx use?: Telnyx lists 48 subprocessors on its published list, including Google LLC, Amazon Web Services, Inc., Softlayer Technologies, Inc. (owned by International Business Machines Corporation and d/b/a IBM Cloud)International Business Machines Corporation, Microsoft, and Equinix and 43 more.
Where does Telnyx process customer data?: The subprocessors named by Telnyx are located in United States, Australia, Czech Republic, Norway, Singapore, and United Kingdom, as stated on its list.
Does Telnyx use customer data to train AI models?: According to its AI terms, Telnyx uses customer data to train AI models unless customers opt out: “Telnyx will not use Input Data or Output to train or fine-tune artificial intelligence or machine learning models made available to anyone other than Customer, except (a) with Customer's prior opt-in in writing, or (b) using data de-identified in accordance with Section 3.5 of the DPA.”
How quickly does Telnyx report a personal data breach to customers?: According to its DPA, Telnyx reports a personal data breach to customers without undue delay, with no set deadline: “notify Customer without undue delay, such notice to be delivered in accordance with Section 13 of this DPA”
How does Telnyx transfer personal data outside the EU?: Telnyx's DPA relies on standard contractual clauses, the EU–US Data Privacy Framework, and adequacy decisions: “the parties agree that the Standard Contractual Clauses, incorporated by reference to this DPA, will apply in respect of the processing of such Personal Data”
Does Telnyx have a SOC 2 Type II report?: Yes. Telnyx's trust page lists a SOC 2 Type II report: “SOC 2 Type II Compliant”
Which security certifications does Telnyx list?: Telnyx's trust page lists SOC 2 Type II, ISO 27001, ISO 27701, and PCI DSS.
When was Telnyx's subprocessor list last checked?: ClauseTrail last checked Telnyx's subprocessor list on September 28, 2026. Lists are re-checked daily.
How do I find out when Telnyx adds or removes a subprocessor?: ClauseTrail monitors Telnyx's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.