1. Overview
ORAVYS engages the sub-processors listed below to provide its voice intelligence services. This page is maintained in compliance with GDPR Article 28 and is updated at least thirty (30) days before any change to the sub-processor list takes effect.
Enterprise customers with a Data Processing Agreement (DPA) will also receive direct notification of any changes via the contact email specified in their DPA.
2. Current Sub-Processors
| Sub-Processor | Purpose | Data Location | Safeguards |
|---|---|---|---|
| Google Cloud Platform Google LLC |
Cloud infrastructure, compute, storage | EU (europe-west1, Belgium) | EU adequacy + SCCs, ISO 27001, SOC 2 Type II |
| Stripe Stripe, Inc. |
Payment processing (tokenized) | US / EU | PCI DSS Level 1, SOC 2 Type II, SCCs |
| SendGrid Twilio Inc. |
Transactional email delivery | US | SOC 2 Type II, SCCs, ISO 27001 |
No Third-Party AI Processing
ORAVYS does not use third-party AI services, external large language models, or cloud-based machine learning APIs to process your voice recordings or generate analysis results. All analysis is performed exclusively by ORAVYS's proprietary engine pipeline.
3. Change Notification Process
Before engaging a new sub-processor or replacing an existing one, ORAVYS will:
- Update this page at least 30 days before the change takes effect.
- Notify enterprise DPA customers directly via email.
- Provide enterprise customers with a reasonable objection period of at least 15 business days. If objections cannot be resolved, the enterprise customer may terminate the affected services without penalty.
4. Data Residency
By default, all voice data processing occurs within the European Economic Area (GCP europe-west1, Belgium). Enterprise customers may request EU-only data residency guarantees via their DPA.
Stripe and SendGrid process limited data (payment tokens, email addresses) which may transit through US infrastructure. No voice recordings or analysis results are shared with these sub-processors.
5. Contact
For questions about our sub-processors or to request notification of changes, contact privacy@oravys.com.