Sub-processors
Everyone in the chain, and what each one sees.
Pocavi Limited engages the third parties below to process data on our behalf. Each is bound by a data processing agreement, and each is listed with what actually reaches it.
| Sub-processor | Purpose | Location | Data processed |
|---|---|---|---|
| Amazon Web Services (AWS) | All application hosting, compute, database and file storage. POCAVI runs entirely on AWS serverless infrastructure. | eu-west-2 (London). Further regions available on request. | All customer account data and Salesforce metadata held by the platform. |
| Anthropic | AI inference for natural language queries, formula generation, release note drafting and change analysis. | United States | Salesforce schema patterns only: object and field names, types and relationships. Not your Salesforce records. Prompts are not retained for model training. |
| Stripe | Subscription billing and payment processing. | United States and Ireland | Billing contact details and payment information. Stripe holds card details directly; POCAVI never receives or stores them. |
| Cloudflare | DNS and content delivery for pocavi.ai. | Global edge network | Standard web request metadata such as IP address and user agent. No account or Salesforce data. |
| Plausible Analytics | Website analytics for pocavi.ai. | European Union | Aggregated page views and referrers. Cookieless, with no cross-site tracking and no personal identifiers. |
| Google (Google Ads) | Advertising measurement on the marketing site only. | United States | Marketing site interactions, and only where a visitor has accepted cookies. Loaded with consent denied by default. No account or Salesforce data. |
Changes
How you find out when this changes.
We will give customers at least 30 days' notice by email before adding or replacing a sub-processor, so you have time to object before the change takes effect.
Questions
Need something this page does not cover?
Email sam@pocavi.ai with questions about any sub-processor, or to be notified of future changes to this list.
Back to the legal centreData Processing AgreementThe terms under which we act as your processor.
Privacy noticeWhat we collect directly and why.
Trust centreHow the platform is built, and what it does not hold.