Subprocessors
Baseline sub-processor register for AUVY Cortex (Annex C). For DPAs or the latest review pack, contact security@auvy.ai.
Register version 1.7 · Last updated 25 May 2026
| Subprocessor | Purpose | Data categories | Hosting | Optional |
|---|---|---|---|---|
 Amazon Web Services EMEA SARL DPA / policy | Cloud infrastructure, storage, backups, security logging, AI/model gateway | Workspace data, prompt content, uploaded files, service logs | EU (Frankfurt) | No |
 Microsoft Ireland Operations Ltd. DPA / policy | Cloud infrastructure and Azure-hosted model services where configured | Workspace data, prompt content, files attached to prompts, service logs | EU (Frankfurt, Sweden) | No |
 Supabase Inc. DPA / policy | Authentication, identity DB, product DB, file storage | Account identifiers, profile data, workspace data, uploaded files | EU (Frankfurt) | No |
 Stripe Payments Europe, Ltd. DPA / policy | Subscription billing, invoicing, payment methods, billing support | Email, billing name/address, payment method (held by Stripe), subscription state, usage/invoice metadata | EU (Ireland) | No |
 Vercel Inc. DPA / policy | Frontend hosting, edge delivery, preview deployments, deployment analytics | Request metadata, CDN asset telemetry, deployment metadata | EU (Frankfurt), global edge | No |
 Railway Corp. DPA / policy | Container hosting for app services, workers, queues, caches, self-hosted stores | Service runtime data, queue state, ephemeral cache, transient logs | EU (Amsterdam) | No |
 PostHog Inc. DPA / policy | Product analytics, event analytics, feature flags when enabled | Pseudonymous user ID, feature usage events, workspace metadata | EU | Yes |
 Resend Inc. DPA / policy | Transactional email (account, billing, export, system notifications) | Recipient email, transactional email content, delivery metadata | EU | No |
 Gladia SAS DPA / policy | Speech-to-text and audio transcription for voice-enabled product features | Audio content submitted for transcription, transcript outputs, request metadata | EU (France) | No |
This is the baseline register. Customer-enabled third-party connections run through AUVY Connect (first-party). Connected destination systems and optional inference models you enable may add further recipients controlled by the customer.