Data Processing Addendum

Parties

This DPA is between Wayso (“Processor”) and the customer (“Controller”) who has accepted the Terms of Service.

Purpose of processing

We process audio recordings and associated metadata solely to provide the transcription and analysis services described in the Terms of Service.

Sub-processors

• Vobiz — telephony carriage, call recording and call detail records
• Google (Gemini) — transcription and AI analysis
• Sarvam AI — speech recognition and synthesis, where selected for an AI voice agent
• OpenAI — speech and language models, where selected for an AI voice agent
• Fly.io — infrastructure hosting (EU/Paris for the application and database; Singapore for the AI voice agent service)
• Cloudflare R2 — audio file storage

Security measures

Data in transit is encrypted via TLS 1.2+. Session tokens are AES-256 encrypted. Each tenant's data is isolated in its own database namespace under a per-tenant credential, and the database is reachable only over a private network. Access is restricted by session or API key to the owning organization. See our Security page, which also states plainly which certifications we do not hold.

Data subject rights

We will assist the Controller in responding to data subject requests within 30 days. Contact privacy@wayso.in.