Subprocesadores
Esta página lista los subprocesadores externos que Boom Enterprise Inc. contrata para prestar sus servicios. Mantenemos esta lista de acuerdo con nuestros Contratos de Tratamiento de Datos con clientes y las leyes de protección de datos aplicables, incluido el GDPR.
Última actualización: September 3, 2026
| Subprocesador | País de ubicación | Finalidad del tratamiento |
|---|---|---|
| OpenAI, L.L.C. | United States | AI model inference for the generation of conversation responses. OpenAI does not use API data to train its models and retains data for no more than 30 days per its Data Processing Addendum. |
| Anthropic PBC | United States | AI model inference for the generation and review of conversation responses. Anthropic does not use API data to train its models and retains data for no more than 30 days per its Data Processing Addendum. |
| Eleven Labs Inc. (ElevenLabs) | United States | Conversational voice AI for the platform's voice channel. Processes end user telephone numbers, display names, and live call audio in order to perform speech recognition, response generation, and speech synthesis, and returns call transcripts and summaries to Boom. |
| Amazon Web Services, Inc. | United States | Cloud infrastructure hosting for application services, compute, and storage of personal data at rest. |
| Google LLC (Google Cloud Platform) | United States | Cloud infrastructure hosting for application services and storage of personal data at rest. |
| Neon, Inc. | United States | Managed PostgreSQL database hosting for storage of personal data, including interview transcripts, respondent contact details, and application data. |
| Vercel, Inc. | United States | Frontend application hosting and content delivery for the Boom web dashboard. |
| Upstash, Inc. | United States | Durable workflow orchestration, message queueing, caching, and rate limiting for asynchronous processing of platform events. Inbound webhook payloads and workflow step results transit and are retained by Upstash for the duration of a run, including end user phone numbers, messaging profile names, and conversation and transcript content. |
| Inngest Inc | United States | Durable workflow orchestration for journey execution, per-conversation extraction, segment evaluation, and customer data source synchronization. Workflow events identify records by internal identifier rather than by contact details, but the inputs and outputs of each workflow step transit Inngest and are retained in its run history, including the conversation and transcript content the extraction workflow processes. |
| Clerk, Inc. | United States | Authentication and identity management for the Boom web dashboard, covering user accounts, organizations, and role membership. Processes Boom user account data (name, email address, profile image) only; end users of Boom's customers are not registered as Clerk identities. |
| Ably Realtime Ltd | United Kingdom | Realtime transport that delivers live updates to the Boom dashboard and to end user web chat sessions. Conversation events pass through Ably in transit, including end user contact identifiers and message content. |
| Helicone, Inc. | United States | LLM observability and logging of requests and responses exchanged with AI providers, for monitoring, debugging, and operational analytics. |
| Better Stack (BetterStack s.r.o.) | Czech Republic (European Union) | Application-level logging and monitoring of platform events and system activity. |
| PostHog, Inc. | United States | Product analytics and session replay for Boom's authenticated web application, used for product analytics and diagnosing customer-reported issues. Processes Boom user account data (name, email) and application usage telemetry. |
| Twilio Inc. | United States | Messaging infrastructure for delivery of conversation messages between Boom's platform and end users. |
| Meta Platforms, Inc. (WhatsApp Business API) | United States | Messaging infrastructure for delivery of conversation messages via WhatsApp. |
| Plus Five Five, Inc. (Resend) | United States | Outbound and transactional email delivery. Processes recipient email addresses, names, and message content, both for end user outreach sent from a customer's verified sending domain and for platform notifications sent to Boom account users. |
| Stripe, Inc. | United States | Payment processing and billing for Boom's business customers. Processes billing contact information only. |
| Google LLC (Google Workspace) | United States | Internal productivity tools (email, documents, calendar) used by Boom personnel. May incidentally process personal data when customers communicate with Boom via email. |
| Vanta Inc. | United States | Compliance automation platform that monitors Boom's internal systems for security and compliance purposes. Does not process customer personal data. |
OpenAI, L.L.C.
País de ubicación: United States
Finalidad del tratamiento: AI model inference for the generation of conversation responses. OpenAI does not use API data to train its models and retains data for no more than 30 days per its Data Processing Addendum.
Anthropic PBC
País de ubicación: United States
Finalidad del tratamiento: AI model inference for the generation and review of conversation responses. Anthropic does not use API data to train its models and retains data for no more than 30 days per its Data Processing Addendum.
Eleven Labs Inc. (ElevenLabs)
País de ubicación: United States
Finalidad del tratamiento: Conversational voice AI for the platform's voice channel. Processes end user telephone numbers, display names, and live call audio in order to perform speech recognition, response generation, and speech synthesis, and returns call transcripts and summaries to Boom.
Amazon Web Services, Inc.
País de ubicación: United States
Finalidad del tratamiento: Cloud infrastructure hosting for application services, compute, and storage of personal data at rest.
Google LLC (Google Cloud Platform)
País de ubicación: United States
Finalidad del tratamiento: Cloud infrastructure hosting for application services and storage of personal data at rest.
Neon, Inc.
País de ubicación: United States
Finalidad del tratamiento: Managed PostgreSQL database hosting for storage of personal data, including interview transcripts, respondent contact details, and application data.
Vercel, Inc.
País de ubicación: United States
Finalidad del tratamiento: Frontend application hosting and content delivery for the Boom web dashboard.
Upstash, Inc.
País de ubicación: United States
Finalidad del tratamiento: Durable workflow orchestration, message queueing, caching, and rate limiting for asynchronous processing of platform events. Inbound webhook payloads and workflow step results transit and are retained by Upstash for the duration of a run, including end user phone numbers, messaging profile names, and conversation and transcript content.
Inngest Inc
País de ubicación: United States
Finalidad del tratamiento: Durable workflow orchestration for journey execution, per-conversation extraction, segment evaluation, and customer data source synchronization. Workflow events identify records by internal identifier rather than by contact details, but the inputs and outputs of each workflow step transit Inngest and are retained in its run history, including the conversation and transcript content the extraction workflow processes.
Clerk, Inc.
País de ubicación: United States
Finalidad del tratamiento: Authentication and identity management for the Boom web dashboard, covering user accounts, organizations, and role membership. Processes Boom user account data (name, email address, profile image) only; end users of Boom's customers are not registered as Clerk identities.
Ably Realtime Ltd
País de ubicación: United Kingdom
Finalidad del tratamiento: Realtime transport that delivers live updates to the Boom dashboard and to end user web chat sessions. Conversation events pass through Ably in transit, including end user contact identifiers and message content.
Helicone, Inc.
País de ubicación: United States
Finalidad del tratamiento: LLM observability and logging of requests and responses exchanged with AI providers, for monitoring, debugging, and operational analytics.
Better Stack (BetterStack s.r.o.)
País de ubicación: Czech Republic (European Union)
Finalidad del tratamiento: Application-level logging and monitoring of platform events and system activity.
PostHog, Inc.
País de ubicación: United States
Finalidad del tratamiento: Product analytics and session replay for Boom's authenticated web application, used for product analytics and diagnosing customer-reported issues. Processes Boom user account data (name, email) and application usage telemetry.
Twilio Inc.
País de ubicación: United States
Finalidad del tratamiento: Messaging infrastructure for delivery of conversation messages between Boom's platform and end users.
Meta Platforms, Inc. (WhatsApp Business API)
País de ubicación: United States
Finalidad del tratamiento: Messaging infrastructure for delivery of conversation messages via WhatsApp.
Plus Five Five, Inc. (Resend)
País de ubicación: United States
Finalidad del tratamiento: Outbound and transactional email delivery. Processes recipient email addresses, names, and message content, both for end user outreach sent from a customer's verified sending domain and for platform notifications sent to Boom account users.
Stripe, Inc.
País de ubicación: United States
Finalidad del tratamiento: Payment processing and billing for Boom's business customers. Processes billing contact information only.
Google LLC (Google Workspace)
País de ubicación: United States
Finalidad del tratamiento: Internal productivity tools (email, documents, calendar) used by Boom personnel. May incidentally process personal data when customers communicate with Boom via email.
Vanta Inc.
País de ubicación: United States
Finalidad del tratamiento: Compliance automation platform that monitors Boom's internal systems for security and compliance purposes. Does not process customer personal data.
Cambios en nuestros subprocesadores
Boom puede contratar nuevos subprocesadores o reemplazar a los existentes de vez en cuando. Daremos aviso de esos cambios a los clientes con quienes tengamos un Contrato de Tratamiento de Datos vigente, en los plazos establecidos en ese contrato (normalmente al menos 10 días hábiles de anticipación). Los clientes pueden pedir que se les notifique de cambios escribiendo a privacy@useboom.ai con el asunto 'Sub-processor Notifications'.
Preguntas
Para preguntas sobre esta lista o nuestras prácticas de protección de datos, escribe a privacy@useboom.ai con 'Privacy' en el asunto.