Sub-processors
Effective 1 October 2026
These are the companies that process personal information on our behalf to provide Krivollo. Each is bound by written terms requiring it to protect the information and use it only to provide its service. We give customers at least 30 days’ notice before adding a new sub-processor of Customer Data — email privacy@krivollo.com to be notified of changes.
1. Core platform
Used for every workspace.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Vercel | Application hosting, serverless compute and file storage | All categories processed by the app; uploaded files and recordings | Australia (Sydney) for application compute; file storage and edge network global/United States |
| Neon | Primary PostgreSQL database | All categories stored by the app | Australia (Sydney) |
| Inngest | Background job scheduling | Job instructions containing record identifiers and some content | United States |
| Anthropic | AI features (drafting, summaries, classification, assistant, website assistant) | Text and data needed for the feature in use | United States |
| Amazon Web Services (Bedrock) | AI processing for workspaces on the Australian data-residency option | As for Anthropic | Australia (Sydney) |
| Deepgram | Live and recorded speech-to-text | Call and meeting audio | United States, or Australia for data-residency workspaces |
| ElevenLabs | Text-to-speech and speech-to-text for voice features | Text to be spoken; voice audio | United States / European Union |
| Resend | Transactional and workspace email delivery | Recipient name and email address, email content | United States |
| Stripe | Payments and subscription billing | Billing contact details, payment information (collected by Stripe directly) | United States / global |
| Supabase | Real-time messaging for live meetings | Meeting room events and participant presence | Region as configured |
| WorkOS | Enterprise single sign-on and directory sync | User identity profile from the customer's identity provider | United States |
| Sign in with Google; web fonts for workspace branding | Name, email, profile picture; IP address when fonts load | United States / global | |
| Browser push services (Google, Apple, Mozilla) | Delivering push notifications you turn on | Notification text and a device subscription identifier | United States / global |
2. Feature-specific providers
Used only when a workspace turns on the feature concerned. Most are located in the United States.
| Provider | Purpose | Data |
|---|---|---|
| Zoom | Video meetings (Live Room) | Meeting audio, video and participant names |
| Twilio | SMS and in-browser calling | Phone numbers, message content, call audio |
| fal.ai | AI image and video generation | Prompts and generated media |
| Cloudflare | Video hosting and streaming | Uploaded videos |
| MapTiler, Esri and OpenStreetMap (Nominatim) | Maps and address lookup for property documents | Property addresses |
| Slybroadcast | Voicemail drops | Phone numbers and recorded messages |
3. Integrations you connect
When a workspace connects one of its own accounts — Aircall, JustCall, Salesforce, HubSpot, Xero, Google Workspace (Sheets, Calendar, Drive picker), Microsoft 365 / Outlook, DocuSign, Slack, Cotality (CoreLogic) and VerseMaster, plus customer-configured webhooks, API clients and storage buckets. — data flows between Krivollo and that service on the customer’s instruction. These services are chosen and contracted by the customer, not by us, so they are not our sub-processors; their own terms and privacy policies apply.
Workspaces that use their own AI provider key send AI requests to their own account with that provider.
4. More information
See our Privacy Policy for how we protect information sent overseas, and our Data Handling Policy for our security measures.
Krivollo is operated by [Krivollo legal entity name] (ABN [ABN to be confirmed]), [Registered business address, Victoria, Australia]. Questions about this document: privacy@krivollo.com.