Legal
Sub-Processor List
Effective date: June 17, 2026
Turkana, LLC, doing business as “BRCK” (“BRCK,” “we,” “us,” or “our”), engages third-party sub-processors to help provide, secure, support, and improve its Services. A sub-processor is a third party that Processes Customer Personal Data— including call/message content and metadata, call detail records, CPNI, and E911 registered-address data — on BRCK’s behalf. BRCK acts as a service provider / processor for that data, as described in the Privacy Policy §1 and the Data Processing Addendum. BRCK imposes data-protection obligations on its sub-processors that are no less protective than those in the DPA, and remains responsible for its sub-processors’ performance. (BRCK is a trade name of Turkana, LLC.)
This list covers the categories of sub-processors referenced in Privacy Policy §1.4 and DPA §6: cloud infrastructure and hosting; payment processing; ERP / billing and customer records; productivity and collaboration; and messaging/voice carrier and routing partners. Processing locations are within the United States.
Change-notification commitment
BRCK will update this list before a new or replacement sub-processor begins Processing Customer Personal Data and will notify business customers in advance: at least thirty (30) days before for cloud-infrastructure/hosting sub-processors, and at least ten (10) daysbefore for other sub-processors, except where a shorter period is reasonably necessary (e.g., to address a security risk or a vendor’s discontinuation of service). Business customers may subscribe to change notifications, and may raise a reasonable, good-faith data-protection objection to a new sub-processor, by contacting privacy@brck.com, as described in DPA §6.3.
Messaging / voice carrier and routing partners
| Sub-processor | Service provided | Categories of data processed | Processing location |
|---|---|---|---|
| Bandwidth | SMS/voice carriage and routing (underlying carrier) | Message content & metadata, originating/terminating numbers, routing/delivery data, CPNI | United States |
| Inteliquent * | Upstream voice termination/origination | Call detail records, originating/terminating numbers, routing/signaling metadata, CPNI | United States |
Cloud infrastructure and hosting
| Sub-processor | Service provided | Categories of data processed | Processing location |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure / call-processing platform hosting | Call content & metadata, CDRs, routing/signaling data, CPNI, account data | United States |
Payment processing
| Sub-processor | Service provided | Categories of data processed | Processing location |
|---|---|---|---|
| CyberSource | Card payment processing (current) | Billing & payment data, account identifiers | United States |
| Stripe † | Card payment processing (migration target) | Billing & payment data, account identifiers | United States |
ERP / billing / customer records
| Sub-processor | Service provided | Categories of data processed | Processing location |
|---|---|---|---|
| Oracle NetSuite | ERP, billing, CRM, and customer/support records | Account, contact, billing, and support-correspondence data | United States |
Productivity and collaboration
| Sub-processor | Service provided | Categories of data processed | Processing location |
|---|---|---|---|
| Google Workspace | Email and document collaboration | Account & contact data, business correspondence | United States |
| Slack | Internal team messaging / collaboration | Account & contact data, business correspondence | United States |
Questions and objections
To request a copy of this list, subscribe to change notifications, or raise a data-protection objection to a sub-processor, contact BRCK at privacy@brck.com or +1 (855) 244-2026, or write to Turkana, LLC d/b/a BRCK, 16928 Lancaster Hwy, Suite 109, Charlotte, NC 28277. Sub-processor governance is set out in the BRCK Data Processing Addendum(§6).
* Listed pending confirmation. † BRCK is mid-migration from CyberSource to Stripe; this entry will be updated at the cutover.