Sub-processors
The companies that process personal data for us in order to run RevvoHub, what each one does, and where.
In effect from 8 October 2026Version 2026-10-08
To run RevvoHub we rely on the providers below. Each one processes personal data only on our instructions, under a data processing agreement, and is not allowed to use it for its own purposes. This list is part of our Data Processing Agreement.
Current sub-processors
| Provider | What it does for us | Data involved | Where | Safeguard for transfers |
|---|---|---|---|---|
| Supabase (Supabase Pte. Ltd., Singapore; infrastructure on Amazon Web Services) | Database, sign-in system, file storage | Everything stored in RevvoHub: account details, customers, vehicles, work orders, AI chat history, logos | European Union: Frankfurt, Germany | Data stays in the EU. Standard Contractual Clauses cover any support access from outside the EEA. |
| Vercel (Vercel Inc., USA; infrastructure on Amazon Web Services) | Hosting of the app and of this website; delivery network; request logs | Content of requests while they are being handled; technical data such as IP addresses | Application code runs in Frankfurt, Germany. The delivery network and logs are global and may involve the USA. | Standard Contractual Clauses |
| Anthropic (Anthropic Ireland, Limited, Ireland; Anthropic, PBC, USA) | The Claude model behind the AI assistants | The questions a mechanic sends and the vehicle details they attach (no registration plate, owner or VIN serial); in the customer app, the conversation and the customer's cars and jobs at that workshop (no names, contact details, registration plates or VINs); the answers | USA and other regions where Anthropic operates | Standard Contractual Clauses. Content is not used to train models and is deleted within 30 days. |
| Resend (Resend, Inc., USA) | Sending notification emails | The recipient's email address, the workshop's name and the text of the email (which contains no messages or records) | USA | Standard Contractual Clauses |
Our providers use their own sub-processors, which they list publicly:
Supabase, Vercel, Anthropic, Resend.
Push notifications, for those who turn them on, are delivered by the push service of the browser's maker (for example Google, Apple or Mozilla), which the browser chooses. Their content is encrypted end to end, so the push service cannot read it.
Changes
We announce a new or replacement sub-processor at least 14 days in advance, by email to account holders or by notice in the app, and update this page. If you have a data protection concern about a change, write to privacy@revvo-hub.com within that period.
History
| Date | Change |
|---|---|
| 6 October 2026 | First version of this list. |
| 8 October 2026 | Anthropic now also runs the assistant in the customer app. Added Resend, for notification emails. |