Every third party that processes personal data on behalf of Apruvly, with the role each one plays and where it operates.
Privacy PolicyThese providers run on every Apruvly account and are required for the platform to operate.
| Provider | Purpose | Region | Transfer basis |
|---|---|---|---|
| Stripe | Payment processing for subscriptions and credit purchases. | US/IE | Standard Contractual Clauses (Art. 33, I) and/or contract performance (Art. 33, V) |
| Amazon Web Services | Cloud infrastructure: application, database and object storage hosting. | BR/US/EU | Standard Contractual Clauses (Art. 33, I) and/or contract performance (Art. 33, V) |
| Cloudflare | Edge network: CDN, DNS, DDoS mitigation and web firewall; when enabled, Turnstile anti-bot challenge on public forms and admin login. | Global | Standard Contractual Clauses (Art. 33, I) and/or contract performance (Art. 33, V) |
| SendGrid | Delivery of platform transactional email (notifications, support and operational messages). | US | Standard Contractual Clauses (Art. 33, I) and/or contract performance (Art. 33, V) |
| Mailgun | Delivery of platform transactional email and inbound reply-by-email processing. | US/EU | Standard Contractual Clauses (Art. 33, I) and/or contract performance (Art. 33, V) |
| Google (Google Ads / Analytics) | Conversion measurement and remarketing (Google Ads) and aggregate audience/usage analytics (Google Analytics) on public pages, with consent. | US/Global | Standard Contractual Clauses (Art. 33, I) and/or contract performance (Art. 33, V) |
These providers only process data if you use the Apruvly mobile app. Crash reporting and usage analytics can be turned on or off at any time in the app settings.
| Provider | Purpose | Region | Transfer basis |
|---|---|---|---|
| Cloudflare R2 | Storage of files attached to approvals and the security-check event queue; the check itself runs on Apruvly infrastructure. | Global | Standard Contractual Clauses (Art. 33, I) and/or contract performance (Art. 33, V) |
| Google Firebase Cloud Messaging | Delivery of push notifications to the mobile app (device token and minimal routing payload). | US/Global | Standard Contractual Clauses (Art. 33, I) and/or contract performance (Art. 33, V) |
| Firebase Crashlytics | Mobile app crash and ANR diagnostics (device model, OS, app version and stack traces). | US/Global | Standard Contractual Clauses (Art. 33, I) and/or contract performance (Art. 33, V) |
| Google Analytics for Firebase | Aggregate usage analytics of the mobile app (screens and interaction events), only with in-app consent; no advertising identifiers and never approval content. | US/Global | Standard Contractual Clauses (Art. 33, I) and/or contract performance (Art. 33, V) |
| Apple (APNs) | iOS push transport underlying FCM (APNs token and notification). | US/Global | Standard Contractual Clauses (Art. 33, I) and/or contract performance (Art. 33, V) |
These providers only receive data once you enable the matching integration in your account.
| Provider | Purpose | Region | Transfer basis |
|---|---|---|---|
| xAI | AI provider used by the optional knowledge base and AI-assisted support features. | US | Standard Contractual Clauses (Art. 33, I) and/or contract performance (Art. 33, V) |
| Twilio | Delivery of SMS and WhatsApp messages and webhook signature checks. | US | Standard Contractual Clauses (Art. 33, I) and/or contract performance (Art. 33, V) |
| Meta (WhatsApp Business API) | Delivery of workflow notifications via WhatsApp Business API. | US/IE | Standard Contractual Clauses (Art. 33, I) and/or contract performance (Art. 33, V) |
| Slack | Delivery of workflow notifications to Slack. | US | Standard Contractual Clauses (Art. 33, I) and/or contract performance (Art. 33, V) |
| Microsoft Teams | Delivery of workflow notifications to Microsoft Teams. | US/EU | Standard Contractual Clauses (Art. 33, I) and/or contract performance (Art. 33, V) |
| Discord | Delivery of workflow notifications to Discord. | US | Standard Contractual Clauses (Art. 33, I) and/or contract performance (Art. 33, V) |
| Telegram | Delivery of workflow notifications to Telegram. | Global | Standard Contractual Clauses (Art. 33, I) and/or contract performance (Art. 33, V) |
| DingTalk | Delivery of workflow notifications to DingTalk. | CN | Standard Contractual Clauses (Art. 33, I) and/or contract performance (Art. 33, V) |
Material changes to this list will be reflected in the Privacy Policy.