Service Delivery Sub-Processors & Processors

The scope of this Service Delivery Sub-Processors & Processors section is to help answer these frequently asked questions:

“Is your product dependent upon any third-party platforms or services to operate successfully? If so, please describe these dependencies and how you manage third-party service disruptions.”

Subprocessors & Processors

Discovery Loft may use third-party data processors who may have access to specific customer data (a sub-processor) in operational and functional activities to provide support and deliver the PAVE services.

Due Diligence Discovery Loft undertakes a thorough review of each potential vendor's access to customer data. This review ensures levels of privacy and security are at a minimum equivalent to those provided by Discovery Loft in our Information Security Policy which includes minimizing the amount of customer data processed.

Table #1 - Infrastructure Sub-processors – Service Data Storage and Processing

Entity Name
Purpose
Service Disruption Backup
Entity Country

Google Inc.

Cloud Service Provider

Deploy new clusters or utilize AWS.

United States

Amazon Web Services, Inc.

Cloud Service Provider

Backups only, use Google Cloud for backup as an alternative.

United States, Ireland, Germany, Japan

Table #2 - Service Specific Sub-processors

Entity Name
Purpose
Service Disruption Backup
Entity Country

Twilio, Inc.

Twilio’s development platform provides the APIs that PAVE uses to facilitate SMS and text functionality.

Send a link as an email instead using SES services.

United States

Amazon Web Services, Inc

PAVE uses Amazon Simple Email Service (SES) to send transactional emails generated by the PAVE services.

N/A

United States, Ireland, Germany, Japan

Google Inc.

Discovery Loft’s Email Provider, including Google Analytics, Data Storage

N/A

United States

Hubspot, Inc.

CRM and customer support software

N/A

United States

Stripe, Inc.

Stripe development platform provides APIs for PAVE to utilize secure credit card processing for subscription service users.

N/A

United States, Ireland

Slack Technologies, LLC, a Salesforce company

Slack provides direct communication channels for PAVE’s client teams and our customers, PAVE also uses Slack for automated notifications for system monitoring.

N/A

United States

Zoom Video Communications, Inc.

Video communication & collaboration solution

Google

United States

Auth0, Inc.

PAVE's optional authentication mechanism for OAuth2-based logins during Connector registration.

System registration process.

United States

Datadog, Inc. (“Datadog”)

Datadog provides PAVE with content distribution, security and abuse prevention and DNS services for traffic transmitted to and from the services.

N/A

United States

Snyk Limited

Sync finds and automatically fixes vulnerabilities in code, open source dependencies, containers, and infrastructure as code — all powered by Snyk’s industry-leading security intelligence.

N/A

United Kingdom

BrowserStack, Inc

BrowserStack provides PAVE’s QA team with an automated testing platform for testing websites and mobile apps.

N/A

India

Kelly Blue Book (Cox Automotive, Dealertrack Canada)

Kelly Blue Book provides PAVE with an API service to obtain vehicle valuations in Canada and USA Only.

N/A

United States, Canada

vAuto (Cox Automotive)

vAuto is an alternative integration that can be initiated by PAVE customers to send session information to their vAuto service in Canada and USA Only.

N/A

United States

Solera - Carweb Limited,

Carweb provides PAVE with an API service to identify the vehicle information by PAVE passing the vehicle’s registration number or VIN. (only available for UK and Europe)

PAVE resorts to its own information it collects during the session. Limited data is returned until the provider’s service becomes restored.

United Kingdom

Autodata, Inc. dba Chrome Data (“Chrome Data”)

Autodata provides PAVE with an API service to identify the vehicle information by PAVE passing the vehicle’s VIN in Canada and USA Only.

PAVE resorts to its own information it collects during the session. Limited data is returned until the provider’s service becomes restored.

United States

Last updated