DOCUMENT VERSION: 1.3LAST REVISED: March 14, 2026
Authorized Sub-Processors
EXECUTIVE SUMMARY: Autvy maintains an exhaustive, transparent list of all third-party vendors and sub-processors utilized across our infrastructure.
1. Core Infrastructure Sub-Processors
The following sub-processors are contracted to deliver foundational server infrastructure and communications:
| Entity Name | Role & Service | Data Location | Safeguards |
|---|---|---|---|
| Amazon Web Services (AWS) | Supervisor API, compute, encrypted receipt storage | Frankfurt (eu-central-1), US-East | ISO 27001, SOC 2 Type II, SCCs |
| Cloudflare, Inc. | Edge routing, DDoS mitigation, DNS security | Global Anycast Edge | SOC 2 Type II, Privacy Shield / SCCs |
| Postmark (ActiveCampaign) | Transactional plain-English incident receipts | United States | SOC 2 Type II, TLS 1.3 enforced |
2. Notification of Changes
Autvy publishes updates to this directory thirty (30) days in advance of onboarding any new sub-processor. Subscribed administrators receive email notification.