Yeah that makes sense ...... in most cases the public DPA is the default agreement, and by using vapi.ai you’re automatically covered under it, so you can list them as a subprocessor in your own DPA. If you want, I can quickly help you double.....check that everything is properly worded for compliance (just to be safe), and even help you structure how to present it to your customers.