Sub-processors
Effective January 8, 2026
1. About This List
A sub-processor is a third-party service that processes data on our behalf to provide the Convilyn Service. We maintain this page so customers — particularly those subject to GDPR, UK GDPR, or similar data-protection regulations — can review our current sub-processors at any time.
For how we collect and protect personal information overall, see our Privacy Policy.
2. Current Sub-processors
The following sub-processors process customer data as part of providing the Service:
| Provider | Purpose | Data Location | Certifications |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure: compute (Lambda), storage (S3, DynamoDB), AI inference (Bedrock), OCR (Textract), object storage, networking. Hosts the Convilyn Service. | Tokyo (ap-northeast-1) for storage and workflow execution; N. Virginia (us-east-1) for Bedrock inference; Singapore (ap-southeast-1) for Textract OCR | ISO 27001, SOC 2 Type II, HIPAA-eligible |
| Anthropic (accessed via AWS Bedrock) | AI model provider. Claude models perform document, image, and code transformations on your inputs. Anthropic does not train on inputs or outputs sent via AWS Bedrock. | Processed within AWS Bedrock — no data leaves the AWS region | ISO 27001, ISO 42001, SOC 2 Type II |
| Paddle.com Market Limited | Payment processing and Merchant of Record. Handles tax calculation, invoicing, subscription billing, and transactional payment emails. | EU (Republic of Ireland) and globally per Paddle's infrastructure | PCI DSS Level 1, GDPR-compliant |
3. Updates to This List
Sub-processors may be added, replaced, or removed as the Service evolves. This page is the current list at all times, so it is the place to check rather than a copy taken earlier.
4. How to Object
Questions or concerns about any sub-processor listed here can be sent to the address in section 5.
5. Contact Us
Questions about our sub-processors or this page can be sent to:
CoreNovus
Email: support@corenovus.com