Sub-processors
Inviaro engages a small number of third-party vendors to operate the Service. Each is bound by a Data Processing Agreement and is contractually committed to data-protection standards at least equivalent to ours.
Categories
| Category | Purpose |
|---|---|
| Application hosting and database | Hosts the Inviaro application and stores your workspace data |
| Edge and content delivery | DDoS protection, content delivery, static asset hosting |
| Messaging channel APIs | The channels you connect (WhatsApp, Instagram, Messenger, Viber, Telegram, web widget) |
| Calendar integrations | Active only when you connect Google Calendar or Outlook |
| AI providers | Optional AI features in Studio flows (only when explicitly enabled per workspace) |
| Email delivery | Transactional and ops-critical email (verification, password reset, billing) |
| Payment processing | Subscription billing and invoice payment |
| Operational monitoring | Error reporting and application performance monitoring |
Getting the current named-vendor list
The current, named list of sub-processors — including each vendor's legal entity, processing region, and the safeguard authorising any transfer — is provided to customers as Exhibit A to the Data Processing Agreement, accepted at subscription. You can also request the current list at any time by emailing [email protected].
Change notice
We notify active customers at least 30 days in advance of any addition or replacement of a sub-processor that materially affects how Personal Data is processed. Notice is delivered by email to the workspace owner and via an in-app banner. If you object within the 30-day window, contact [email protected] and we will work with you on alternatives, including termination with pro-rata refund where appropriate.
Questions
For the signed DPA, the specific SCC modules in use, or anything else not covered above: [email protected].