Sub-processors

The companies that process customer data on Avo’s behalf, and where.

Updated 21 October 2026

SupabaseSupabase Inc.

What they do
Application database, sign-in and server functions
Where
EU (Ireland)

MongoDB AtlasMongoDB Inc.

What they do
Database for meeting analysis and sales history
Where
EU (Sweden)

RailwayRailway Corporation

What they do
Runs the workflow that processes meetings, and scheduled jobs
Where
EU (the Netherlands). Platform logs in the US

Google Cloud (Vertex AI)Google Cloud EMEA Ltd.

What they do
AI processing: summaries, quotes, assessments and suggestions
Where
EU (Vertex AI “eu” and europe-west4, the Netherlands)

ResendResend, Inc.

What they do
Sends emails to the customer’s users
Where
EU (Ireland) for sending. Account details in the US

VercelVercel Inc.

What they do
Hosts the web app’s files. Handles only IP addresses and technical details of requests
Where
Global network. Company in the US

Transfers

Where data can be reached from the US, such as support access, platform logs or account details, it is covered by the EU’s standard contractual clauses in each provider’s agreement, and by the EU-U.S. Data Privacy Framework where the provider is certified.

Your own systems

Microsoft 365 (Teams), HubSpot and Salesforce are the customer’s own systems, not our sub-processors. Avo reads from them only with the customer’s permission.

Changes

We tell every customer by email at least 30 days before we add or replace a sub‑processor. In that time the customer can object.