Sub-processors
Last updated: 2026-07-06
Cradle uses the following third-party services to deliver our platform. This page is kept up to date as sub-processors are added or removed.
Infrastructure and Core Services
| Sub-processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Google Cloud Platform | Cloud infrastructure, compute, storage, database, KMS encryption | All Cradle application data | Australia, United States |
| Firebase (Google) | Authentication, real-time database, web hosting | User auth tokens, session data, real-time conversation state | United States |
| Google Cloud SQL | Relational database | Call records, contact data, organisation data | United States |
| Google Cloud Firestore | NoSQL database, real-time data | Application data, conversation metadata | United States |
| Amazon Web Services (AWS) | Desktop app hosting and distribution | Application binaries (no customer data) | United States |
Telephony
| Sub-processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Twilio | Voice calling, call recording, SMS, WhatsApp | Call audio, caller/callee numbers, call metadata, messages | United States, Australia |
| DIDWW | Number provisioning, call routing | Call routing data, phone numbers | Lithuania (EU) |
| DIDLogic | Number provisioning, call routing | Call routing data, phone numbers | United States |
| 2Talk Limited | Local NZ carrier | Call routing data | New Zealand |
| 2Talk Pty Limited | Local AU carrier | Call routing data | Australia |
| TollFreeForwarding | Number provisioning, call routing | Call routing data, phone numbers | United States |
AI and Transcription
| Sub-processor | Purpose | Data Processed | Location |
|---|---|---|---|
| AssemblyAI | Voice transcription, call summarisation | Call audio, transcription data | United States |
| Google Vertex AI (Gemini) | AI chat, call transcription | Chat messages, call audio, conversation context | United States |
| Google Cloud Text-to-Speech (Gemini TTS) | Voice-menu and greeting audio synthesis | Voice-menu scripts (text), style prompts, generated audio | United States |
Business Operations
| Sub-processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Stripe | Payment processing (card) | Billing details, payment card data (PCI DSS compliant) | United States |
| GoCardless | Payment processing (direct debit) | Customer name, bank account details, billing amounts | United Kingdom |
| Xero | Accounting | Customer names, billing addresses, invoice and payment records | Australia, New Zealand |
| HubSpot | CRM, customer support, analytics | Contact names, emails, support interactions, website analytics | United States |
| SendGrid (Twilio) | Transactional email | Email addresses, notification content | United States |
| Slack | Customer support escalation | Chat messages, customer names, support context | United States |
| Sentry | Error monitoring | Device info, crash logs (no customer PII) | United States |
| Census | Reverse ETL, data sync to HubSpot (deprecated 31 March 2026) | Customer and usage data synced to CRM | United States |
| LogRocket | Session recording, UX debugging (end-of-life — use ends 31 July 2026) | Obscured DOM interactions, session data (no customer PII) | United States |
Integrations (Customer-Initiated)
These services are only accessed when a customer connects their Cradle account to their own account on these platforms:
| Sub-processor | Purpose | Data Processed | Location |
|---|---|---|---|
| HubSpot | CRM integration, contact sync, call logging | Contact names, phone numbers, call metadata, engagement records | United States |
| Xero / XPM | Contact sync, call note creation | Contact names, phone numbers, call summaries | Australia, New Zealand |
| Google Workspace | SSO authentication | User identity, email address | United States |
| Microsoft 365 | SSO authentication, presence sync, calendar | User identity, presence status, calendar availability | United States |
| Vanguard | CRM integration, contact sync | Contact names, phone numbers, call metadata | Australia, New Zealand |
| FYI | Document management integration | Contact data, engagement records | Australia, New Zealand |
Changes
We will update this page when sub-processors are added or removed. Material changes are communicated to affected customers.
Last updated: 6 July 2026