Sub processors
Last updated: May 16, 2026
Overview
CallBack LLC ("CallBack," "we," "us," or "our") engages third-party service providers — "Subprocessors" — to help operate the Platform and provide the Services to our customers. This page identifies our current Subprocessors, the purpose for which each is engaged, and CallBack's commitment to notifying customers of changes.
Current Subprocessors
The following table lists the third-party Subprocessors currently engaged by CallBack to process customer data in connection with the Platform and Services.
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| LeadConnector / GoHighLevel (HighLevel Inc.) | CRM platform backbone, contact management, communications (SMS, email, voice), automations | All customer-uploaded contact data, communications content, account metadata; PHI under separately executed BAA where applicable | United States |
| Stripe, Inc. | Payment processing, subscription billing, tax calculation | Payment card details (tokenized), billing address, transaction history | United States |
| Cloudflare, Inc. | Content delivery network, DDoS protection, bot management | IP address, request metadata, security telemetry | Global edge network |
| Google Cloud Platform (Google LLC) | Hosting infrastructure, computing, storage | Application data, logs, backups | United States |
| Google Workspace (Google LLC) | Business email, document collaboration for CallBack staff handling customer communications | Customer-initiated email content sent to or from CallBack's @callbackinc.com inboxes | United States |
Notification of Changes
CallBack will provide at least thirty (30) days' advance notice of any addition, replacement, or material change to its Subprocessors. Customers may subscribe to subprocessor updates by emailing legal@callbackinc.com.
Emergency Security and Service Continuity
CallBack may make immediate Subprocessor changes without advance notice when required for security, fraud prevention, or to address a service-disrupting issue, with notice provided as soon as practicable thereafter.
HIPAA / BAA Chain
For customers operating under a Business Associate Agreement with CallBack, the Subprocessors listed above operate under appropriate HIPAA Business Associate or sub-Business Associate agreements where they process Protected Health Information. Specifically: LeadConnector / GoHighLevel maintains its own Business Associate Agreement with CallBack, and is responsible for maintaining downstream BAAs with its own subprocessors (including Twilio for SMS/voice services). CallBack does not maintain a direct contractual relationship with these sub-subprocessors. Documentation of the BAA chain is available upon request to legal@callbackinc.com.
Contact
If you have any questions about this page or CallBack's Subprocessor relationships, please contact us at: