LogoLogo
  • PAVE OpenAPI Overview
  • How PAVE Works
    • Capture Link
    • Guided Capture
    • Customer Disclosures
    • Identified Vehicle Information
    • Captured Photos
    • Text Notifications
    • Inspection Results
    • Condition Report (PDF)
    • Detected Damages
    • Grading
    • Languages
    • Accuracy & Limitations
  • INTEGRATIONS
    • Developer Docs
      • Authentication
        • Generate Access Token
      • Sessions
        • POST Create Session
        • GET Session Data
        • GET Session Photos
        • GET Session Notes
        • GET Session Results
        • PUT Update Session
        • DELETE Session
      • Webhooks
        • GET All Callbacks
        • GET View a Callback
        • POST Create New Callback
        • PUT Update a Callback
        • DELETE a Callback
      • Deep Linking
        • Deep Link with React Native App
        • Deep Link Native App
        • Deep Linking with Shareable Links
      • Pass-Through Additional User Information
      • Tracking Your Sessions
      • User Session Lifecycle
      • Developer Testing
    • Account Optional Add-ons
      • Capture Only Theme (CAPT)
        • Skip Pictures
      • Right-Hand-Drive Capture Flow
  • MANAGING YOUR ACCOUNT
    • Your Guide to PAVE's Account and Enterprise Dashboards
  • Hotspots
    • PAVE Hotspots API
    • Activating PAVE Hotspots
    • Developer Docs
      • Authentication
        • Generate Access Token
      • Sessions
        • POST Create Session
        • POST Upload Photos
        • GET Results
  • OTHER RESOURCES
    • PAVE Capture Troubleshooting Guide
      • iPhone (iOS) Issues
        • Does my mobile phone work with PAVE?
        • Can't Access Camera - Incorrect Web Browser Usage
        • Can't Access Camera - Camera Permission Not Enabled
        • Camera Screen is Locked and won't Rotate
        • Inspection Get's Stuck
        • Inspection Won't Begin or Complete
        • Getting Back to an In-Progress Inspection
        • Why do I keep getting asked to retake pictures?
      • Android Phone Issues
        • Does my mobile phone work with PAVE?
        • Can't Access Camera - Incorrect Web Browser Usage
        • Can't Access Camera - Camera Permission Not Enabled
        • Camera Screen is Locked and won't Rotate
        • Inspection Gets Stuck
        • Inspection Won't Begin or Complete
        • Getting Back to an In-Progress Inspection
        • Why do I keep getting asked to retake pictures?
    • Policies
      • Service Level Agreement and Standards
      • Service Delivery Sub-Processors & Processors
      • API Strategy and Architecture
      • Information Security Policy
        • Data Quality Guideline
        • Data Retention Policy
        • Backup and Disaster Recovery
        • Data Residency
        • Data Access Control
Powered by GitBook
On this page
  1. OTHER RESOURCES
  2. Policies

Service Delivery Sub-Processors & Processors

The scope of this Service Delivery Sub-Processors & Processors section is to help answer these frequently asked questions:

“Is your product dependent upon any third-party platforms or services to operate successfully? If so, please describe these dependencies and how you manage third-party service disruptions.”

Subprocessors & Processors

Discovery Loft may use third-party data processors who may have access to specific customer data (a sub-processor) in operational and functional activities to provide support and deliver the PAVE services.

Due Diligence Discovery Loft undertakes a thorough review of each potential vendor's access to customer data. This review ensures levels of privacy and security are at a minimum equivalent to those provided by Discovery Loft in our Information Security Policy which includes minimizing the amount of customer data processed.

Table #1 - Infrastructure Sub-processors – Service Data Storage and Processing

Entity Name
Purpose
Service Disruption Backup
Entity Country

Google Inc.

Cloud Service Provider

Deploy new clusters or utilize AWS.

United States

Amazon Web Services, Inc.

Cloud Service Provider

Backups only, use Google Cloud for backup as an alternative.

United States, Ireland, Germany, Japan

Table #2 - Service Specific Sub-processors

Entity Name
Purpose
Service Disruption Backup
Entity Country

Twilio, Inc.

Twilio’s development platform provides the APIs that PAVE uses to facilitate SMS and text functionality.

Send a link as an email instead using SES services.

United States

Amazon Web Services, Inc

PAVE uses Amazon Simple Email Service (SES) to send transactional emails generated by the PAVE services.

N/A

United States, Ireland, Germany, Japan

Google Inc.

Discovery Loft’s Email Provider, including Google Analytics, Data Storage

N/A

United States

Hubspot, Inc.

CRM and customer support software

N/A

United States

Stripe, Inc.

Stripe development platform provides APIs for PAVE to utilize secure credit card processing for subscription service users.

N/A

United States, Ireland

Slack Technologies, LLC, a Salesforce company

Slack provides direct communication channels for PAVE’s client teams and our customers, PAVE also uses Slack for automated notifications for system monitoring.

N/A

United States

Zoom Video Communications, Inc.

Video communication & collaboration solution

Google

United States

Auth0, Inc.

PAVE's optional authentication mechanism for OAuth2-based logins during Connector registration.

System registration process.

United States

Datadog, Inc. (“Datadog”)

Datadog provides PAVE with content distribution, security and abuse prevention and DNS services for traffic transmitted to and from the services.

N/A

United States

Snyk Limited

Sync finds and automatically fixes vulnerabilities in code, open source dependencies, containers, and infrastructure as code — all powered by Snyk’s industry-leading security intelligence.

N/A

United Kingdom

BrowserStack, Inc

BrowserStack provides PAVE’s QA team with an automated testing platform for testing websites and mobile apps.

N/A

India

Kelly Blue Book (Cox Automotive, Dealertrack Canada)

Kelly Blue Book provides PAVE with an API service to obtain vehicle valuations in Canada and USA Only.

N/A

United States, Canada

vAuto (Cox Automotive)

vAuto is an alternative integration that can be initiated by PAVE customers to send session information to their vAuto service in Canada and USA Only.

N/A

United States

Solera - Carweb Limited,

Carweb provides PAVE with an API service to identify the vehicle information by PAVE passing the vehicle’s registration number or VIN. (only available for UK and Europe)

PAVE resorts to its own information it collects during the session. Limited data is returned until the provider’s service becomes restored.

United Kingdom

Autodata, Inc. dba Chrome Data (“Chrome Data”)

Autodata provides PAVE with an API service to identify the vehicle information by PAVE passing the vehicle’s VIN in Canada and USA Only.

PAVE resorts to its own information it collects during the session. Limited data is returned until the provider’s service becomes restored.

United States

PreviousService Level Agreement and StandardsNextAPI Strategy and Architecture

Last updated 1 year ago