Sub-processors

Last updated: August 3, 2026

These are the third parties that process personal data on behalf of VaaniYantra customers. It is the list referenced by our Privacy Policy and Data Processing Addendum.

Processing outside India. Our servers, database and backups are in the United States, and most of the providers below are reached on global endpoints. Patient data handled through this service is therefore processed outside India. If that does not work for your practice, tell us before you onboard.

Core — required for the service to work

ProviderPurposeData it receivesProcessing location
Google — Gemini & Gemini LiveThe AI that answers calls and messages, and summarises calls afterwardsCaller audio in real time during a call; call transcripts; the agent’s instructions and retrieved knowledge-base text. In the patient chatbot: patient name, age, sex, recorded allergies and released visit history including prescriptions.Global endpoints (may process outside India)
Google Cloud Speech-to-Text & Text-to-SpeechTranscribing callers and giving the agent a voice, where the realtime model is not usedCaller audio; the text the agent is about to speakGlobal endpoints (may process outside India)
Google Firebase AuthenticationSign-in for clinic staffStaff email address and authentication credentials. Patients never use this — they sign in with a one-time code.Google, global
Google Cloud PlatformHosting: application servers, the database, and encrypted nightly backupsAll data held by the serviceUnited States (us-east1)
Telephony carrier — Twilio, Plivo or ExotelCarrying phone calls and sending SMS. Which one applies depends on the number.Caller and recipient phone numbers; call audio in transit; SMS content including appointment confirmations, reminders and patient portal sign-in codes. Where the carrier records a call, the audio is held in that carrier’s account, not ours.Twilio and Plivo: global (United States). Exotel: India.
Cashfree PaymentsTaking subscription paymentsBilling name, email and phone of the clinic account. No patient data.India

Optional — only if you connect them

These are off unless a clinic turns them on. If you do not connect them, no data reaches them.

ProviderPurposeData it receivesProcessing location
Meta — WhatsApp Cloud APISending and receiving WhatsApp messages, where enabledPatient phone number; message content; template values such as first name, clinic name, service, appointment time and the patient portal linkGlobal endpoints
Google CalendarBooking appointments into a clinic’s or doctor’s calendarPatient name, full phone number, the service booked, the doctor’s name, and any notes the agent capturedGlobal endpoints
HubSpotPushing completed calls into a clinic’s CRMCaller phone number and derived contact fields; the AI call summary, sentiment, all collected fields, and a link to the recordingGlobal endpoints (United States)
DeepgramAlternative speech recognition and voice, where a clinic supplies a keyCaller audio; the text the agent is about to speakGlobal endpoints (United States)
ElevenLabsAlternative voice, where a clinic supplies a keyThe text the agent is about to speakGlobal endpoints (United States)
Email delivery (Resend or your SMTP server)Sending team invitationsStaff email address, inviter name, organisation name. No patient data.Depends on provider
Endpoints you configure yourselfWebhooks and the public API, where a clinic connects its own systemsWhatever that endpoint is entitled to receive — call details including numbers, transcripts and summaries, appointment details including the patient number, and, through the API, full clinical records. A destination you choose is your responsibility, not ours.Wherever you send it

Changes

We will update this page before a new sub-processor begins handling customer data, and notify customers of material additions. If you object to a new sub-processor, contact us — your remedy is to stop using the affected feature, or to end your subscription.

Questions: info@vaaniyantra.com.