Carefully selected partners that meet our security and privacy requirements.

How Omnito evaluates, contracts with, and governs third-party providers that support our services—without allowing them to use or sell your data.

Intro — how we use and govern subprocessors

We use a limited number of subprocessors to host our services and deliver specific functionality. Before engaging any subprocessor, Omnito performs due diligence on their security, privacy, and compliance practices.

All subprocessors are contractually required to meet the data protection and security obligations defined in our Master Services Agreement. They are permitted to process data only to provide services to Omnito and are prohibited from selling, using, or accessing your data for any other purpose.

We continuously review our subprocessors to ensure ongoing alignment with our security and privacy standards.

Update notifications

You can stay informed about changes to our subprocessors by subscribing to our RSS feed. We publish updates whenever a new subprocessor is added or an existing one is changed.

Subprocessors

SubprocessorService provided and certificationsLocation
Microsoft CorporationCloud hosting for Omnito services. Certified to ISO 9001, ISO 22301, ISO 27001, ISO 27017, ISO 27018, ISO 20000-1; PCI DSS Level 1 compliant.United States (U.S.)
Amazon Web Services, Inc.Cloud hosting for Omnito services. Certified to ISO 9001, ISO 27001, ISO 27017; SOC 1, SOC 2, and SOC 3 audited.United States (U.S.)
Google LLCCalendar integration services. Certified to ISO 27001, ISO 27017, ISO 27018; SOC 2 Type II and SOC 3 audited.United States (U.S.)
Vonage Holdings Corp.Voice and text notification services. Certified to ISO/IEC 27001, 27017, 27018, ISO 22301; HITRUST CSF; SOC 2 and SOC 3 audited.United States (U.S.)
Mailgun Technologies, Inc.Backup email relay services. Certified to ISO 27001, ISO 27701; SOC 2 audited.United States (U.S.)
LiveKit, Inc.Real-time audio streaming using WebRTC. SOC 2 compliant; GDPR-ready; ISO 27001, PCI DSS, and FedRAMP certifications in progress.United States (U.S.)
Deepgram, Inc.Speech-to-text transcription services. SOC 2 compliant; GDPR-ready; CCPA and PCI DSS aligned.United States (U.S.)