Legal
Sub-processors who helps us
The vendors Telenoa uses to process personal data on your behalf as a customer.
Privacy policyLast updated: 24 October 2026
Telenoa, CVR no. 46373731, is your data processor when you use Telenoa to receive and answer enquiries from your customers. For that we use the sub-processors listed below.
We notify you by email at least 30 days before we start using a new sub-processor. You can object and terminate the agreement, cf. GDPR Art. 28(2).
If the English and Danish versions of this list ever differ, the Danish version at telenoa.com/underdatabehandlere applies.
Current sub-processors
VendorPurposeDataLocationTransfer basis
Contabo
Contabo GmbH, Germany
PurposeThe server that runs the app, database, backups, the website and our own statistics and error log
DataAll data in the service: accounts, enquiries, emails, call transcripts, SMS log, contact notes and knowledge base
LocationGermany (EU)
Transfer basisNo transfer. Data stays in the EU
DigitalOcean
DigitalOcean, LLC, USA · added 10/2026
PurposeThe telephony server: Noa's voice and conversation during calls on Noa Voice
DataCall audio, phone numbers and the transcript while the call is live (data passes through the server and is not stored there)
LocationNetherlands (Amsterdam, EU)
Transfer basisThe server is in the EU. US company: EU-US Data Privacy Framework or Standard Contractual Clauses
Cloudflare R2
Cloudflare, Inc., USA
PurposeFile storage: attachments, uploaded documents, data exports and audio recordings of calls, if you switch recording on
DataFiles and attachments, call recordings (only with “Record calls” switched on)
LocationEU (Cloudflare's EU jurisdiction)
Transfer basisFiles are stored in the EU. US company: EU-US Data Privacy Framework or Standard Contractual Clauses
Resend
Resend, Inc., USA
PurposeSending system emails: login codes, invitations, notifications and receipts to your customers
DataRecipient, subject and content
LocationUSA
Transfer basisEU Standard Contractual Clauses or the EU-US Data Privacy Framework
OpenRouter
OpenRouter, Inc., USA
PurposeRoutes AI calls to Google's Gemini models (Google Vertex AI): sorting, reply drafts, spam filter, chat with Noa, contact notes, and Noa on the phone if Claude doesn't respond. Calls only go to providers that neither store nor train on the data (zero data retention)
DataText from enquiries, emails, knowledge base, calls and chat with Noa
LocationUSA
Transfer basisEU Standard Contractual Clauses or the EU-US Data Privacy Framework
Anthropic
Anthropic, PBC, USA
PurposeNoa on the phone (the Claude AI model): understands what the caller says and phrases Noa's replies during the call. Anthropic neither stores nor trains on your data (zero data retention agreement)
DataThe call transcript while the call is in progress, and the knowledge Noa answers from
LocationUSA
Transfer basisEU Standard Contractual Clauses or the EU-US Data Privacy Framework
Google Gemini API
Google, USA
PurposeMakes knowledge base texts searchable for Noa (embeddings)
DataKnowledge base texts
LocationUSA
Transfer basisEU Standard Contractual Clauses or the EU-US Data Privacy Framework
Exa
Exa Labs, Inc., USA
PurposeWeb search when Noa reads your website during setup or searches the web in chat
DataSearch terms and web addresses
LocationUSA
Transfer basisEU Standard Contractual Clauses or the EU-US Data Privacy Framework
Stripe
Stripe, Ireland/USA
PurposePayments and invoicing
DataName, email, company, VAT number, billing address and card details
LocationIreland and USA
Transfer basisEU Standard Contractual Clauses or the EU-US Data Privacy Framework
Telnyx
Telnyx LLC, USA
PurposeTelephony for Noa Voice: phone numbers, calls, transfers and recording of the call, if you switch it on. We then copy the recording to our own file storage
DataPhone numbers, the call audio while the call is live, and the recording when recording is switched on
LocationUSA
Transfer basisEU Standard Contractual Clauses or the EU-US Data Privacy Framework
Soniox
Soniox, Inc., USA
PurposeSpeech to text during calls
DataAudio of what the caller says
LocationUSA
Transfer basisEU Standard Contractual Clauses or the EU-US Data Privacy Framework
ElevenLabs
ElevenLabs, Inc., USA
PurposeNoa's voice during calls
DataThe text Noa says
LocationUSA
Transfer basisEU Standard Contractual Clauses or the EU-US Data Privacy Framework
GatewayAPI
OnlineCity.IO ApS, Denmark · added 10/2026
PurposeSends text messages on your behalf after calls on Noa Voice (e.g. after a missed call, a confirmed booking or a message taken)
DataThe recipient's phone number, the message text and delivery status
LocationEU (GatewayAPI's EU platform)
Transfer basisNo transfer. Data stays in the EU
Our own systems
The following runs on our own server and is not a sub-processor:
- AI calls are logged in our own database without content: only feature, model, token count, price, time and whether the call succeeded. We no longer use Langfuse.
- Error log: our own installation of GlitchTip on the same server. Errors are stored without user, cookies or request content, and email addresses, phone numbers and keys in the error message are replaced before it is stored.
- Visitor statistics for telenoa.com: our own installation of Umami (statistik.telenoa.com). It sets no cookies and stores no IP addresses. The app only sends two events there, “created” and “paid”, without personal data.
- When Noa reads your website or your documents into the knowledge base, this is done with Crawl4AI and Docling, which we run ourselves, not at a third party.
- Operational alerts go to an internal Discord channel. They only contain where in the system the error happened and a scrubbed error message with email addresses, numbers and quoted text removed.
Change log
- 24 October 2026Anthropic (the Claude AI model for Noa on the phone) added. Anthropic was put into use around 22 October 2026, before we gave customers the 30 days' notice we promise. We apologise. If you object, write to kontakt@telenoa.com. OpenRouter is now used for Noa on the phone when Claude doesn't respond. The text is also shorter and clearer, and the date follows the other legal pages.
- 3 October 2026DigitalOcean (the telephony server in Amsterdam) and GatewayAPI (text messages after calls) added. Both were in use before we gave customers the 30 days' notice we promise. We apologise. If you object, write to kontakt@telenoa.com. Also: Contabo clarified: the server is in Germany. Cloudflare R2 is also used for call recordings when you switch recording on. Telnyx makes the recording itself. Langfuse removed: AI calls are now logged without content in our own database.
- 30 September 2026List published as a standalone page. OpenRouter description clarified: all AI calls, including spam filtering, go to Google's Gemini models at providers with no data collection and zero data retention.
Questions about the list?
Write to us if you want to object, need a signed data processing agreement or just want to know more.