# Service Delivery Sub-Processors & Processors The scope of this Service Delivery Sub-Processors & Processors section is to help answer these frequently asked questions: *“Is your product dependent upon any third-party platforms or services to operate successfully? If so, please describe these dependencies and how you manage third-party service disruptions.”* ### **Subprocessors & Processors** Discovery Loft may use third-party data processors who may have access to specific customer data (a sub-processor) in operational and functional activities to provide support and deliver the PAVE services. Due Diligence Discovery Loft undertakes a thorough review of each potential vendor's access to customer data. This review ensures levels of privacy and security are at a minimum equivalent to those provided by Discovery Loft in our Information Security Policy which includes minimizing the amount of customer data processed. **Table #1 -** **Infrastructure Sub-processors – Service Data Storage and Processing** | Entity Name | Purpose | Service Disruption Backup | Entity Country | | ------------------------- | ---------------------- | ------------------------------------------------------------ | -------------------------------------- | | Google Inc. | Cloud Service Provider | Deploy new clusters or utilize AWS. | United States | | Amazon Web Services, Inc. | Cloud Service Provider | Backups only, use Google Cloud for backup as an alternative. | United States, Ireland, Germany, Japan | **Table #2 -** **Service Specific Sub-processors** | Entity Name | Purpose | Service Disruption Backup | Entity Country | | ---------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------- | | Twilio, Inc. | Twilio’s development platform provides the APIs that PAVE uses to facilitate SMS and text functionality. | Send a link as an email instead using SES services. | United States | | Amazon Web Services, Inc | PAVE uses Amazon Simple Email Service (SES) to send transactional emails generated by the PAVE services. | N/A | United States, Ireland, Germany, Japan | | Google Inc. | Discovery Loft’s Email Provider, including Google Analytics, Data Storage | N/A | United States | | Hubspot, Inc. | CRM and customer support software | N/A | United States | | Stripe, Inc. | Stripe development platform provides APIs for PAVE to utilize secure credit card processing for subscription service users. | N/A | United States, Ireland | | Slack Technologies, LLC, a Salesforce company | Slack provides direct communication channels for PAVE’s client teams and our customers, PAVE also uses Slack for automated notifications for system monitoring. | N/A | United States | | Zoom Video Communications, Inc. | Video communication & collaboration solution | Google | United States | | Auth0, Inc. | PAVE's optional authentication mechanism for OAuth2-based logins during Connector registration. | System registration process. | United States | | Datadog, Inc. (“Datadog”) | Datadog provides PAVE with content distribution, security and abuse prevention and DNS services for traffic transmitted to and from the services. | N/A | United States | | Snyk Limited | Sync finds and automatically fixes vulnerabilities in code, open source dependencies, containers, and infrastructure as code — all powered by Snyk’s industry-leading security intelligence. | N/A | United Kingdom | | BrowserStack, Inc | BrowserStack provides PAVE’s QA team with an automated testing platform for testing websites and mobile apps. | N/A | India | | Kelly Blue Book (Cox Automotive, Dealertrack Canada) | Kelly Blue Book provides PAVE with an API service to obtain vehicle valuations in Canada and USA Only. | N/A | United States, Canada | | vAuto (Cox Automotive) | vAuto is an alternative integration that can be initiated by PAVE customers to send session information to their vAuto service in Canada and USA Only. | N/A | United States | | Solera - Carweb Limited, | Carweb provides PAVE with an API service to identify the vehicle information by PAVE passing the vehicle’s registration number or VIN. (only available for UK and Europe) | PAVE resorts to its own information it collects during the session. Limited data is returned until the provider’s service becomes restored. | United Kingdom | | Autodata, Inc. dba Chrome Data (“Chrome Data”) | Autodata provides PAVE with an API service to identify the vehicle information by PAVE passing the vehicle’s VIN in Canada and USA Only. | PAVE resorts to its own information it collects during the session. Limited data is returned until the provider’s service becomes restored. | United States |