Legal
Sub-processor List
Last updated: 2026-05-24
Augustova Limited (“Onrolo”) engages the following sub-processors to deliver the Platform. Where personal data is transferred outside the UK or EEA we rely on UK International Data Transfer Agreements (IDTA) or EU Standard Contractual Clauses (SCCs).
We will provide at least 30 days’ prior notice of any new sub-processors via email to the Customer’s designated contact. Customers with DPA objection rights may raise concerns to legal@onrolo.ai.
| Processor | Purpose | Jurisdiction | Transfer basis | Privacy policy |
|---|---|---|---|---|
| Supabase, Inc. | Managed PostgreSQL database, authentication, object storage | EU (AWS eu-west-1, Ireland) | EU adequacy decision / UK IDTA | Link |
| Retell AI, Inc. | AI voice screening sessions | US | UK IDTA / EU SCCs | Link |
| Twilio Inc. | SMS and WhatsApp Cloud API delivery | US (data residency options available) | UK IDTA / EU SCCs | Link |
| Resend, Inc. | Transactional email delivery | US | UK IDTA / EU SCCs | Link |
| Anthropic, PBC | Large-language-model inference for screening and scoring | US | UK IDTA / EU SCCs | Link |
| Vercel, Inc. | Application hosting, edge runtime, CI/CD | US (global CDN edge nodes) | UK IDTA / EU SCCs | Link |
| Functional Software, Inc. (Sentry) | Application error monitoring and performance tracing | US | UK IDTA / EU SCCs | Link |
| Inngest, Inc. | Background job orchestration and event-driven workflows | US | UK IDTA / EU SCCs | Link |
| Upstash, Inc. | Redis-compatible cache and rate limiting | US (EU region available) | UK IDTA / EU SCCs | Link |
| Cloudflare, Inc. (Turnstile) | Bot protection on public-facing forms | US (global CDN) | UK IDTA / EU SCCs | Link |
| Meta Platforms Ireland Ltd. (WhatsApp Cloud API) | WhatsApp Business messaging to candidates | US / EU | UK IDTA / EU SCCs | Link |
