This page lists the third-party subprocessors Convoy AI Inc. (“Convoy”) uses to process personal data when providing Convoy Cloud, as referenced in our Data Processing Addendum and Privacy Policy. Convoy imposes data-protection obligations on each subprocessor that are no less protective than those we accept, and remains responsible for their performance.
1. Infrastructure and Platform Subprocessors
| Subprocessor | Purpose | Personal data processed | Location |
|---|---|---|---|
| Amazon Web Services, Inc. | Cloud hosting, storage, queueing, compute | Account data, usage metadata, Customer Content in transit/at rest | United States |
| Amazon Cognito (AWS) | Identity and authentication | Name, email, hashed credentials, auth metadata | United States |
| Amazon SES (AWS) | Transactional email delivery | Name, email address | United States |
| Stripe, Inc. | Payment processing and billing | Billing contact, payment-method metadata | United States |
2. Model Provider Subprocessors
When you direct a request to a model, Convoy transmits your Customer Content and the minimum metadata needed to that provider, which processes it to generate a response under its own terms. The providers available may change.
| Model Provider | Purpose | Personal data processed | Location |
|---|---|---|---|
| AWS Bedrock (AWS) | LLM inference | Customer Content submitted to the model | United States |
| Anthropic, PBC | LLM inference | Customer Content submitted to the model | United States |
| OpenAI, L.L.C. | LLM inference | Customer Content submitted to the model | United States |
3. Operational / Support Subprocessors
| Subprocessor | Purpose | Personal data processed | Location |
|---|---|---|---|
| Functional Software, Inc. (Sentry) | Error tracking and performance monitoring | Limited diagnostic and usage metadata | United States |
4. Changes and Notifications
Convoy will update this list before authorizing a new subprocessor that processes Customer Personal Data and will provide a mechanism for customers to receive notice of changes, with the objection rights described in the DPA. To subscribe to change notifications, contact contact@cnvy.ai.