Third Party Index

Snapshot 23035

Document
Subprocessor list
URL
https://trust.cal.com/subprocessors
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
static
Size
114266 bytes
SHA-256 (raw)
b15c368f257f04663856f7e97fb252ecff5726710e344b1eb97deea821284b83
SHA-256 (normalized text)
f7e8058335654a132c560a735103c8e234c80247c655a41465610a348318142c

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Subprocessors
Cal.com engages the third parties below to process customer personal data. Each is bound by a data processing agreement.
Subprocessor	Purpose	Data	Location	Since
Amazon RDS Postgres	Primary Postgres database for the product	All product data: account, booking, billing and support records	United States	20 Aug 2026
Amazon Web Services (S3)	File and media storage	Uploaded images and media; depending on configuration, call recordings and transcripts	United States	20 Aug 2026
Cloudflare	File and media storage (R2); alternative email transport (configuration-dependent, only one email provider active at a time)	Uploaded images and media; call recordings and transcripts (configuration-dependent); when used for email: sender/recipient names and addresses, subject and body, calendar invite details	United States	20 Aug 2026
Vercel	Hosting and CDN for the app and website; website analytics	IP addresses, request metadata, and any personal data contained in requests/responses in transit	United States	20 Aug 2026
Metabase Cloud	Internal business intelligence and analytics	Production account and booking records made available through connected data sources	United States	20 Aug 2026
SendGrid (Twilio)	Transactional email delivery: confirmations, reminders, invites (active provider for cal.com)	Recipient and sender addresses and names, subject and body, calendar invite (title, times, description, attendee list)	United States	20 Aug 2026
Twilio	SMS and WhatsApp reminders, phone verification, phone number lookup	Phone numbers, message contents, verification codes	United States	20 Aug 2026
Intercom	Support chat and support tickets	Name, email, account ID, plan, signup date, org and usage counts, contents of support conversations	United States	20 Aug 2026
Daily.co	Cal Video: video calls, recordings, transcripts	Meeting and participant data, audio and video of recorded calls, transcripts	United States	20 Aug 2026
Slack	Internal and external communication	Messages, files and attachments, channel and workspace metadata, user profile information (name, email address, avatar)	United States	20 Aug 2026
Stripe	Subscriptions, checkout, invoices, and customer-collected booking payments	Email, billing name and address, card details entered on Stripe's own checkout (PCI-DSS certified; card numbers never reach Cal.com servers), subscription metadata	United States	20 Aug 2026
OpenAI	AI meeting notes: summarizing Cal Video transcripts (opt-in AI feature)	Transcript text (may include names and meeting content); no meeting titles, dates, attendee records, or links. No model training on customer data.	United States	20 Aug 2026
Anthropic	In-product AI assistants (e.g. building routing forms); opt-in AI feature	User prompts typed to the assistant and the form or account context needed to answer. No model training on customer data.	United States	20 Aug 2026
Retell AI	Cal.ai phone agents that place or take calls (opt-in AI feature)	Phone numbers; guest name, email and company where configured; call audio and conversation content. No model training on customer data.	United States	20 Aug 2026
PostHog	Product analytics	IP and request metadata; events keyed to an opaque ID (no raw database IDs, emails, slugs, names or booking answers); GeoIP disabled, proxy strips forwarded IPs; outside allowlisted regions events attributed to organization, not person	United States	20 Aug 2026
Google Analytics / Google Tag Manager	Marketing-site traffic measurement (cal.com website only, not the app; outside the EU)	IP address, browser and device data, pages viewed	United States	20 Aug 2026
Dub	Website and signup attribution (marketing site only, not the app)	IP address, browser and device data, referral and page data	United States	20 Aug 2026
X (Twitter) Ads	Ad measurement (marketing site only, not the app)	IP address, browser data, and pixel conversion events	United States	20 Aug 2026
Whop	Whop Payments is a global payment-processing platform that powers Cal Pay, which is a core part of Cal.com's payments offering.	Name, email, payment methods	United States	21 Aug 2026