# Service Delivery Sub-Processors & Processors

The scope of this Service Delivery Sub-Processors & Processors section is to help answer these frequently asked questions:

*“Is your product dependent upon any third-party platforms or services to operate successfully? If so, please describe these dependencies and how you manage third-party service disruptions.”*

### Subprocessors & Processors

Discovery Loft may use third-party data processors who may have access to specific customer data (a sub-processor) in operational and functional activities to provide support and deliver the PAVE services.

Due Diligence Discovery Loft undertakes a thorough review of each potential vendor's access to customer data. This review ensures levels of privacy and security are at a minimum equivalent to those provided by Discovery Loft in our Information Security Policy which includes minimizing the amount of customer data processed.

**Table #1 -** **Infrastructure Sub-processors – Service Data Storage and Processing**

| Entity Name | Purpose | Service Disruption Backup | Entity Country |
| --- | --- | --- | --- |
| Google Inc. | Cloud Service Provider | Deploy new clusters or utilize AWS. | United States |
| Amazon Web Services, Inc. | Cloud Service Provider | Backups only, use Google Cloud for backup as an alternative. | United States, Ireland, Germany, Japan |

**Table #2 -** **Service Specific Sub-processors**

| Entity Name | Purpose | Service Disruption Backup | Entity Country |
| --- | --- | --- | --- |
| Twilio, Inc. | Twilio’s development platform provides the APIs that PAVE uses to facilitate SMS and text functionality. | Send a link as an email instead using SES services. | United States |
| Amazon Web Services, Inc | PAVE uses Amazon Simple Email Service (SES) to send transactional emails generated by the PAVE services. | N/A | United States, Ireland, Germany, Japan |
| Google Inc. | Discovery Loft’s Email Provider, including Google Analytics, Data Storage | N/A | United States |
| Hubspot, Inc. | CRM and customer support software | N/A | United States |
| Stripe, Inc. | Stripe development platform provides APIs for PAVE to utilize secure credit card processing for subscription service users. | N/A | United States, Ireland |
| Slack Technologies, LLC, a Salesforce company | Slack provides direct communication channels for PAVE’s client teams and our customers, PAVE also uses Slack for automated notifications for system monitoring. | N/A | United States |
| Zoom Video Communications, Inc. | Video communication & collaboration solution | Google | United States |
| Auth0, Inc. | PAVE's optional authentication mechanism for OAuth2-based logins during Connector registration. | System registration process. | United States |
| Datadog, Inc. (“Datadog”) | Datadog provides PAVE with content distribution, security and abuse prevention and DNS services for traffic transmitted to and from the services. | N/A | United States |
| Snyk Limited | Sync finds and automatically fixes vulnerabilities in code, open source dependencies, containers, and infrastructure as code — all powered by Snyk’s industry-leading security intelligence. | N/A | United Kingdom |
| BrowserStack, Inc | BrowserStack provides PAVE’s QA team with an automated testing platform for testing websites and mobile apps. | N/A | India |
| Kelly Blue Book (Cox Automotive, Dealertrack Canada) | Kelly Blue Book provides PAVE with an API service to obtain vehicle valuations in Canada and USA Only. | N/A | United States, Canada |
| vAuto (Cox Automotive) | vAuto is an alternative integration that can be initiated by PAVE customers to send session information to their vAuto service in Canada and USA Only. | N/A | United States |
| Solera - Carweb Limited, | Carweb provides PAVE with an API service to identify the vehicle information by PAVE passing the vehicle’s registration number or VIN. (only available for UK and Europe) | PAVE resorts to its own information it collects during the session. Limited data is returned until the provider’s service becomes restored. | United Kingdom |
| Autodata, Inc. dba Chrome Data (“Chrome Data”) | Autodata provides PAVE with an API service to identify the vehicle information by PAVE passing the vehicle’s VIN in Canada and USA Only. | PAVE resorts to its own information it collects during the session. Limited data is returned until the provider’s service becomes restored. | United States |