Trust Center
Our commitment to data privacy and security is built into how we run the platform. Use this Trust Center to review our compliance program, subprocessors, and security posture.
Start your security review
Request questionnaires, a DPA, or a walkthrough of our controls.
Overview
Welcome to Vatel's Trust Center. Vatel is a voice AI platform operated by Devpro Digital. Use this page to learn about our security posture and request a security review.
Compliance
Frameworks currently active in our compliance program. Reports are listed when they exist.
Trusted by
Subprocessors
Vendors that may process customer data to operate Vatel. Locations are typical headquarters or processing regions, not a signed DPA. Vatel compute runs in GCP us-central1.
| Company | Purpose | Location |
|---|---|---|
| Google Cloud | Compute (Cloud Run api.vatel.ai, GCE telephony VMs, Artifact Registry, VPC). | United States (us-central1) |
| Vercel | Hosting for the product console (console.vatel.ai). Optional AI Gateway for LLMs. | United States |
| Supabase | Auth, Postgres, Storage (recordings, widget assets), Realtime. | United States (hosted on AWS) |
| GitHub | Source control, Actions CI/CD, SSO login via Supabase Auth. | United States |
| Better Stack | Application log shipping (30-day retention). | EU (Czech Republic) |
| Stripe | Billing, subscriptions, overage. | United States |
| Resend | Transactional email (invites, billing, feedback). | United States |
| ElevenLabs | If used, TTS. Optional STT. Default TTS for new agents. | United States |
| Deepgram | If used, STT (Flux, Nova, Nova Medical). Default STT for new agents. | United States |
| OpenAI | If used, STT, TTS, embeddings (document chunks), analysis (AMD/summaries), optional LLM. | United States |
| AssemblyAI | If used, STT (Scribe). | United States |
| If used, Cloud Speech STT, Gemini TTS, and Gemini LLM. | United States | |
| Gladia | If used, STT. | EU (France) |
| Soniox | If used, STT. | United States |
| Speechmatics | If used, STT. | United Kingdom |
| xAI | If used, STT and TTS (api.x.ai). Also LLM via OpenRouter. | United States |
| Cartesia | If used, TTS. | United States |
| Hume AI | If used, TTS. | United States |
| MiniMax | If used, TTS. Also LLM via OpenRouter. | China |
| Fish Audio | If used, TTS (api.fish.audio). | China |
| Inworld AI | If used, TTS. | United States |
| OpenRouter | If used, LLM gateway. | United States |
| Anthropic | If used, LLM (Claude). | United States |
| Alibaba / Qwen | If used, LLM. | China |
| Moonshot AI | If used, LLM (Kimi). | China |
| Zhipu / Z.AI | If used, LLM (GLM). | China |
| IBM | If used, LLM (Granite). | United States |
| DeepSeek | If used, LLM. | China |
| Twilio | Telephony (PSTN inbound/outbound, SMS). | United States |
| Customer HTTP webhooks | Arbitrary third parties the customer configures. | Customer-determined |
SIP peers
SIP trunks and SBCs peered onto sip.vatel.ai are not Vatel-owned subprocessors unless separately contracted.