Sub-Processors
Last updated: 5 June 2026
fonea (kraftscale GmbH) uses the following sub-processors to provide its AI phone assistant service. Data Processing Agreements (DPAs) are in place with all listed sub-processors.
Current Sub-Processors
| Company | Purpose | Data Processing Location | Headquarters | Transfer Safeguard |
|---|---|---|---|---|
| Supabase Inc. | Database, authentication, data storage | Switzerland | USA | DPA + EU/UK Standard Contractual Clauses where applicable |
| Telnyx LLC | Telephony, SIP trunking, call delivery | Germany (EU) | USA | DPA + SCCs where applicable |
| ElevenLabs Inc. | Text-to-speech (TTS), speech-to-text (STT) | Germany (EU) | UK | DPA (UK adequacy) |
| Google LLC | AI language model (LLM) | Germany (EU) | USA | DPA + SCCs where applicable |
| Anthropic PBC | AI language model (LLM) | Germany (EU) | USA | DPA + SCCs where applicable |
| OpenAI Inc. | AI language model (LLM) | Germany (EU) | USA | DPA + SCCs where applicable |
Notes
Data processing in Switzerland: All persistently stored data (customer data, transcriptions, call summaries, metadata) is hosted exclusively in Switzerland by Supabase on Infomaniak Network SA infrastructure (Geneva). Switzerland benefits from an EU adequacy decision and is recognised by the UK as an adequate country.
Data processing in Germany (EU): Telnyx, ElevenLabs, Google, Anthropic, and OpenAI process data exclusively on a transient basis — data is processed in real time and not stored persistently. Processing takes place on servers in Germany, within the EU.
International transfers: All processing takes place within Switzerland or the EU/EEA. Where a provider's parent company is established outside the EEA/UK, transfers are covered by an adequacy decision or by appropriate safeguards under Art. 46 GDPR (in particular EU/UK Standard Contractual Clauses), in addition to the Data Processing Agreement in place with each provider.
Changes to this list: We will notify our customers at least 30 days in advance of any changes. Customers may object to new sub-processors in accordance with the provisions of the DPA.
Contact
For questions about our sub-processors: privacy@fonea.ai