Expedio

Sub-Processors

Last updated: May 2026

This page lists the third-party sub-processors engaged by Expedio Technologies to deliver its services, published in accordance with NDPR / NDPA data-subject-rights obligations. For each sub-processor, we identify the category of personal data shared and, where available, a link to their Data Processing Agreement (DPA).

LLM (Language Model Inference)

ProviderCategoryData Categories SharedDPA
OpenAILLMCall transcripts, caller messages, agent instructions, contact metadata passed in prompts
AnthropicLLMCall transcripts, caller messages, agent instructions, contact metadata passed in prompts
Google (Gemini)LLMCall transcripts, caller messages, agent instructions, contact metadata passed in prompts

Speech-to-Text

ProviderCategoryData Categories SharedDPA
DeepgramSTTRaw voice audio from caller and agent legs
Microsoft Azure SpeechSTTRaw voice audio from caller and agent legs

Text-to-Speech

ProviderCategoryData Categories SharedDPA
ElevenLabsTTSAgent response text; optionally caller voice samples for voice-clone features
CartesiaTTSAgent response text
Microsoft Azure SpeechTTSAgent response text

Voice Infrastructure

ProviderCategoryData Categories SharedDPA
LiveKit CloudVoice infrastructureSDP/ICE metadata; optionally forwarded media tracks for cloud-hosted rooms
Self-hosted LiveKit (lon1)Voice infrastructureAll RTC media and signalling within Expedio-controlled infrastructure; no data leaves Expedio's servers

SIP Carrier

ProviderCategoryData Categories SharedDPA
DialMobileSIP carrier / PSTNCaller ANI/DNIS, call metadata; audio in transit over SIP trunk

Messaging

ProviderCategoryData Categories SharedDPA
Meta (WhatsApp Business Cloud API)MessagingSender phone number, message text, media attachments sent/received over the WhatsApp channelDPA ↗

Tokenization and Payment Processing

ProviderCategoryData Categories SharedDPA
StripeTokenization / paymentPayment card data (tokenized — no PAN retained by Expedio); billing contact name and emailDPA ↗
PaystackTokenization / payment (NG-domestic)Payment card data (tokenized); billing contact name and email

Customer Support

ProviderCategoryData Categories SharedDPA
Chatwoot (self-hosted by Expedio, lon1)Customer supportCaller/contact name, phone, email, conversation transcripts routed to the support inbox

CRM (per-tenant choice)

ProviderCategoryData Categories SharedDPA
Twenty (self-hosted by Expedio, lon1)CRMContact name, phone, email, call summary, deal-stage data where tenant enables CRM sync
Odoo (self-hosted by Expedio, lon1)CRM / ERPContact name, phone, email, call summary, HR/workforce data where tenant enables workforce module

Cloud Infrastructure

ProviderCategoryData Categories SharedDPA
DigitalOceanCloud infrastructure (DOKS, Postgres, object storage, droplets — lon1)All data stored or processed by Expedio; DigitalOcean provides compute, storage, and networking onlyDPA ↗

Email Transport

ProviderCategoryData Categories SharedDPA
ResendTransactional emailRecipient email address, email content (welcome, trial-expiry, notification emails)

Data Residency

All Expedio-controlled infrastructure — including our application servers, managed databases, object storage, and self-hosted services — runs exclusively in DigitalOcean lon1 (London, United Kingdom). Third-party API calls (AI inference, speech processing, messaging) are governed by each provider's DPA as linked above.

Questions about this list? privacy@expediotechnologies.com · Privacy Policy