Subprocessors

Last updated: October 19, 2026.

To provide the CarcoCRM product and websites, 18092516 Canada Inc. o/a CarcoCRM ("CarcoCRM", "we", "us") uses a small number of trusted service providers ("subprocessors") that may process personal information on our behalf. Each is bound by contract to protect the information and to use it only to provide its service to us. This page lists our current infrastructure subprocessors.

Current subprocessors

Subprocessor	Purpose	Information processed	Primary location
Twilio	Voice calls and text message (SMS) delivery to and from your customers, including making call recordings and voicemails before we copy them to our own storage	Phone numbers, call details, message content, and call audio	United States
Cloudflare	Asset and document storage (cdn.carcocrm.com), private storage of call recordings and voicemails, and content delivery	Uploaded photos and documents, call recordings and voicemails, and technical request data	North America (private storage); global edge network (content delivery)
Google	Website analytics (Google Analytics 4 and Tag Manager), advertising measurement (Google Ads), form protection (reCAPTCHA), sign-in, and business email delivery (Google Workspace)	Usage and device data, email addresses, and message content	United States
Firebase Cloud Messaging (Google)	Push notification delivery to the mobile app	Device tokens and notification content	United States

Twilio holds a call recording or voicemail only until our copy is confirmed; we then delete Twilio's copy.

Artificial intelligence

Our artificial intelligence features, including call transcription and call notes, are provided by Carco Technologies and run on our own private infrastructure. We do not send customer or personal information, including call recordings and transcripts, to any third-party artificial intelligence provider.

Planned subprocessors

When paid billing becomes available, we plan to use Stripe as our payment processor to handle subscription payments. We will update this page before that processing begins.

Keeping this list current

We maintain this list as our infrastructure evolves and will update it when we add or change a subprocessor that processes personal information. For the latest list, or to ask a question, email hello@carcocrm.com.