Sub-processors
Last updated: April 26, 2026
Codeova LLC (“Codeova”) engages the following third-party service providers (“sub-processors”) to deliver the Services. Each sub-processor is bound by contractual data protection obligations no less protective than our Data Processing Addendum.
| Service | Purpose | Location | DPA |
|---|---|---|---|
| Supabase | Database, authentication, file storage | United States (AWS us-east-1) | View DPA → |
| OpenAI L.L.C. | AI inference (audit chat, recommendations) | United States | View DPA → |
| Anthropic, PBC | AI inference (Claude models) | United States | View DPA → |
| Stripe, Inc. | Payment processing, subscription billing | United States, Ireland (EU subprocessing) | View DPA → |
| Resend | Transactional email delivery | United States | View DPA → |
| Vercel, Inc. | Application hosting, edge network | United States, global edge | View DPA → |
| Cal.com, Inc. | Appointment booking | United States | View DPA → |
| Google LLC | Operational email (Google Workspace) | United States | View DPA → |
- SupabaseDatabase, authentication, file storage
- Location
- United States (AWS us-east-1)
- DPA
- View →
- OpenAI L.L.C.AI inference (audit chat, recommendations)
- Location
- United States
- DPA
- View →
- Anthropic, PBCAI inference (Claude models)
- Location
- United States
- DPA
- View →
- Stripe, Inc.Payment processing, subscription billing
- Location
- United States, Ireland (EU subprocessing)
- DPA
- View →
- ResendTransactional email delivery
- Location
- United States
- DPA
- View →
- Vercel, Inc.Application hosting, edge network
- Location
- United States, global edge
- DPA
- View →
- Cal.com, Inc.Appointment booking
- Location
- United States
- DPA
- View →
- Google LLCOperational email (Google Workspace)
- Location
- United States
- DPA
- View →
Changes to this list
We will notify customers of any addition, removal, or replacement of a sub-processor at least 15 days before the change takes effect, in line with Clause 9 (Option 2) of the EU Standard Contractual Clauses incorporated into our DPA. Customers may reasonably object on data-protection grounds during that window. If we cannot accommodate the objection, the customer may terminate the affected service under the procedure described in Section 4.2 of the DPA.
To subscribe to sub-processor change notifications, email legal@codeova.ai.
Related: Data Processing Addendum · Privacy Policy · All legal documents