Subprocessadores
Esta página lista os subprocessadores terceiros que a Boom Enterprise Inc. contrata para prestar os seus serviços. Mantemos esta lista de acordo com os nossos Contratos de Tratamento de Dados com clientes e as leis de proteção de dados aplicáveis, incluindo o GDPR.
Última atualização: July 29, 2026
| Subprocessador | País de localização | Finalidade do tratamento |
|---|---|---|
| OpenAI, L.L.C. | United States | AI model inference for the generation of conversation responses. OpenAI does not use API data to train its models and retains data for no more than 30 days per its Data Processing Addendum. |
| Anthropic PBC | United States | AI model inference for the generation and review of conversation responses. Anthropic does not use API data to train its models and retains data for no more than 30 days per its Data Processing Addendum. |
| Eleven Labs Inc. (ElevenLabs) | United States | Conversational voice AI for the platform's voice channel. Processes end user telephone numbers, display names, and live call audio in order to perform speech recognition, response generation, and speech synthesis, and returns call transcripts and summaries to Boom. |
| Amazon Web Services, Inc. | United States | Cloud infrastructure hosting for application services, compute, and storage of personal data at rest. |
| Google LLC (Google Cloud Platform) | United States | Cloud infrastructure hosting for application services and storage of personal data at rest. |
| Neon, Inc. | United States | Managed PostgreSQL database hosting for storage of personal data, including interview transcripts, respondent contact details, and application data. |
| Vercel, Inc. | United States | Frontend application hosting and content delivery for the Boom web dashboard. |
| Upstash, Inc. | United States | Durable workflow orchestration, message queueing, caching, and rate limiting for asynchronous processing of platform events. Inbound webhook payloads and workflow step results transit and are retained by Upstash for the duration of a run, including end user phone numbers, messaging profile names, and conversation and transcript content. |
| Clerk, Inc. | United States | Authentication and identity management for the Boom web dashboard, covering user accounts, organizations, and role membership. Processes Boom user account data (name, email address, profile image) only; end users of Boom's customers are not registered as Clerk identities. |
| Ably Realtime Ltd | United Kingdom | Realtime transport that delivers live updates to the Boom dashboard and to end user web chat sessions. Conversation events pass through Ably in transit, including end user contact identifiers and message content. |
| Helicone, Inc. | United States | LLM observability and logging of requests and responses exchanged with AI providers, for monitoring, debugging, and operational analytics. |
| Better Stack (BetterStack s.r.o.) | Czech Republic (European Union) | Application-level logging and monitoring of platform events and system activity. |
| PostHog, Inc. | United States | Product analytics and session replay for Boom's authenticated web application, used for product analytics and diagnosing customer-reported issues. Processes Boom user account data (name, email) and application usage telemetry. |
| Twilio Inc. | United States | Messaging infrastructure for delivery of conversation messages between Boom's platform and end users. |
| Meta Platforms, Inc. (WhatsApp Business API) | United States | Messaging infrastructure for delivery of conversation messages via WhatsApp. |
| Plus Five Five, Inc. (Resend) | United States | Outbound and transactional email delivery. Processes recipient email addresses, names, and message content, both for end user outreach sent from a customer's verified sending domain and for platform notifications sent to Boom account users. |
| Stripe, Inc. | United States | Payment processing and billing for Boom's business customers. Processes billing contact information only. |
| Google LLC (Google Workspace) | United States | Internal productivity tools (email, documents, calendar) used by Boom personnel. May incidentally process personal data when customers communicate with Boom via email. |
| Vanta Inc. | United States | Compliance automation platform that monitors Boom's internal systems for security and compliance purposes. Does not process customer personal data. |
OpenAI, L.L.C.
País de localização: United States
Finalidade do tratamento: AI model inference for the generation of conversation responses. OpenAI does not use API data to train its models and retains data for no more than 30 days per its Data Processing Addendum.
Anthropic PBC
País de localização: United States
Finalidade do tratamento: AI model inference for the generation and review of conversation responses. Anthropic does not use API data to train its models and retains data for no more than 30 days per its Data Processing Addendum.
Eleven Labs Inc. (ElevenLabs)
País de localização: United States
Finalidade do tratamento: Conversational voice AI for the platform's voice channel. Processes end user telephone numbers, display names, and live call audio in order to perform speech recognition, response generation, and speech synthesis, and returns call transcripts and summaries to Boom.
Amazon Web Services, Inc.
País de localização: United States
Finalidade do tratamento: Cloud infrastructure hosting for application services, compute, and storage of personal data at rest.
Google LLC (Google Cloud Platform)
País de localização: United States
Finalidade do tratamento: Cloud infrastructure hosting for application services and storage of personal data at rest.
Neon, Inc.
País de localização: United States
Finalidade do tratamento: Managed PostgreSQL database hosting for storage of personal data, including interview transcripts, respondent contact details, and application data.
Vercel, Inc.
País de localização: United States
Finalidade do tratamento: Frontend application hosting and content delivery for the Boom web dashboard.
Upstash, Inc.
País de localização: United States
Finalidade do tratamento: Durable workflow orchestration, message queueing, caching, and rate limiting for asynchronous processing of platform events. Inbound webhook payloads and workflow step results transit and are retained by Upstash for the duration of a run, including end user phone numbers, messaging profile names, and conversation and transcript content.
Clerk, Inc.
País de localização: United States
Finalidade do tratamento: Authentication and identity management for the Boom web dashboard, covering user accounts, organizations, and role membership. Processes Boom user account data (name, email address, profile image) only; end users of Boom's customers are not registered as Clerk identities.
Ably Realtime Ltd
País de localização: United Kingdom
Finalidade do tratamento: Realtime transport that delivers live updates to the Boom dashboard and to end user web chat sessions. Conversation events pass through Ably in transit, including end user contact identifiers and message content.
Helicone, Inc.
País de localização: United States
Finalidade do tratamento: LLM observability and logging of requests and responses exchanged with AI providers, for monitoring, debugging, and operational analytics.
Better Stack (BetterStack s.r.o.)
País de localização: Czech Republic (European Union)
Finalidade do tratamento: Application-level logging and monitoring of platform events and system activity.
PostHog, Inc.
País de localização: United States
Finalidade do tratamento: Product analytics and session replay for Boom's authenticated web application, used for product analytics and diagnosing customer-reported issues. Processes Boom user account data (name, email) and application usage telemetry.
Twilio Inc.
País de localização: United States
Finalidade do tratamento: Messaging infrastructure for delivery of conversation messages between Boom's platform and end users.
Meta Platforms, Inc. (WhatsApp Business API)
País de localização: United States
Finalidade do tratamento: Messaging infrastructure for delivery of conversation messages via WhatsApp.
Plus Five Five, Inc. (Resend)
País de localização: United States
Finalidade do tratamento: Outbound and transactional email delivery. Processes recipient email addresses, names, and message content, both for end user outreach sent from a customer's verified sending domain and for platform notifications sent to Boom account users.
Stripe, Inc.
País de localização: United States
Finalidade do tratamento: Payment processing and billing for Boom's business customers. Processes billing contact information only.
Google LLC (Google Workspace)
País de localização: United States
Finalidade do tratamento: Internal productivity tools (email, documents, calendar) used by Boom personnel. May incidentally process personal data when customers communicate with Boom via email.
Vanta Inc.
País de localização: United States
Finalidade do tratamento: Compliance automation platform that monitors Boom's internal systems for security and compliance purposes. Does not process customer personal data.
Mudanças nos nossos subprocessadores
A Boom pode contratar novos subprocessadores ou substituir os existentes de tempos em tempos. Avisaremos sobre essas mudanças os clientes com quem tivermos um Contrato de Tratamento de Dados vigente, nos prazos definidos nesse contrato (normalmente com pelo menos 10 dias úteis de antecedência). Os clientes podem pedir para serem avisados das mudanças escrevendo para privacy@useboom.ai com o assunto 'Sub-processor Notifications'.
Perguntas
Para perguntas sobre esta lista ou nossas práticas de proteção de dados, escreva para privacy@useboom.ai com 'Privacy' no assunto.