Sub-processors
Effective January 8, 2026
1. About This List
A sub-processor is a third-party service that processes data on our behalf to provide the Convilyn Service. We maintain this page so customers — particularly those subject to GDPR, UK GDPR, or similar data-protection regulations — can review our current sub-processors at any time.
For how we collect and protect personal information overall, see our Privacy Policy.
2. Current Sub-processors
The following sub-processors process customer data as part of providing the Service:
| Provider | Purpose | Data Location | Certifications |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure: compute (Lambda), storage (S3, DynamoDB), AI inference (Bedrock), object storage, networking. Hosts the Convilyn Service. | AWS region serving your account (typically US or EU) | ISO 27001, SOC 2 Type II, HIPAA-eligible |
| Anthropic (accessed via AWS Bedrock) | AI model provider. Claude models perform document, image, and code transformations on your inputs. Anthropic does not train on inputs or outputs sent via AWS Bedrock. | Processed within AWS Bedrock — no data leaves the AWS region | ISO 27001, ISO 42001, SOC 2 Type II |
| Paddle.com Market Limited | Payment processing and Merchant of Record. Handles tax calculation, invoicing, subscription billing, and transactional payment emails. | EU (Republic of Ireland) and globally per Paddle's infrastructure | PCI DSS Level 1, GDPR-compliant |
3. Updates to This List
We may add, replace, or remove sub-processors as the Service evolves. Material changes are reflected on this page. For customers under a Data Processing Agreement (DPA), we will provide reasonable advance notice of changes per the terms of that agreement.
4. How to Object
If you are a B2B customer under a DPA and reasonably object to a sub-processor change for legitimate data-protection reasons, please contact us. We will work in good faith to resolve the concern, which may include providing alternative arrangements or, where impractical, allowing termination of the affected service.
5. Contact Us
Questions about our sub-processors or this page can be sent to:
CoreNovus
Email: support@corenovus.com