Service Delivery Sub-Processors & Processors
Last updated
Last updated
The scope of this Service Delivery Sub-Processors & Processors section is to help answer these frequently asked questions:
“Is your product dependent upon any third-party platforms or services to operate successfully? If so, please describe these dependencies and how you manage third-party service disruptions.”
Discovery Loft may use third-party data processors who may have access to specific customer data (a sub-processor) in operational and functional activities to provide support and deliver the PAVE services.
Due Diligence Discovery Loft undertakes a thorough review of each potential vendor's access to customer data. This review ensures levels of privacy and security are at a minimum equivalent to those provided by Discovery Loft in our Information Security Policy which includes minimizing the amount of customer data processed.
Table #1 - Infrastructure Sub-processors – Service Data Storage and Processing
| Entity Name | Purpose | Service Disruption Backup | Entity Country |
|---|---|---|---|
Table #2 - Service Specific Sub-processors
| Entity Name | Purpose | Service Disruption Backup | Entity Country |
|---|---|---|---|
Google Inc.
Cloud Service Provider
Deploy new clusters or utilize AWS.
United States
Amazon Web Services, Inc.
Cloud Service Provider
Backups only, use Google Cloud for backup as an alternative.
United States, Ireland, Germany, Japan
Twilio, Inc.
Twilio’s development platform provides the APIs that PAVE uses to facilitate SMS and text functionality.
Send a link as an email instead using SES services.
United States
Amazon Web Services, Inc
PAVE uses Amazon Simple Email Service (SES) to send transactional emails generated by the PAVE services.
N/A
United States, Ireland, Germany, Japan
Google Inc.
Discovery Loft’s Email Provider, including Google Analytics, Data Storage
N/A
United States
Hubspot, Inc.
CRM and customer support software
N/A
United States
Stripe, Inc.
Stripe development platform provides APIs for PAVE to utilize secure credit card processing for subscription service users.
N/A
United States, Ireland
Slack Technologies, LLC, a Salesforce company
Slack provides direct communication channels for PAVE’s client teams and our customers, PAVE also uses Slack for automated notifications for system monitoring.
N/A
United States
Zoom Video Communications, Inc.
Video communication & collaboration solution
United States
Auth0, Inc.
PAVE's optional authentication mechanism for OAuth2-based logins during Connector registration.
System registration process.
United States
Datadog, Inc. (“Datadog”)
Datadog provides PAVE with content distribution, security and abuse prevention and DNS services for traffic transmitted to and from the services.
N/A
United States
Snyk Limited
Sync finds and automatically fixes vulnerabilities in code, open source dependencies, containers, and infrastructure as code — all powered by Snyk’s industry-leading security intelligence.
N/A
United Kingdom
BrowserStack, Inc
BrowserStack provides PAVE’s QA team with an automated testing platform for testing websites and mobile apps.
N/A
India
Kelly Blue Book (Cox Automotive, Dealertrack Canada)
Kelly Blue Book provides PAVE with an API service to obtain vehicle valuations in Canada and USA Only.
N/A
United States, Canada
vAuto (Cox Automotive)
vAuto is an alternative integration that can be initiated by PAVE customers to send session information to their vAuto service in Canada and USA Only.
N/A
United States
Solera - Carweb Limited,
Carweb provides PAVE with an API service to identify the vehicle information by PAVE passing the vehicle’s registration number or VIN. (only available for UK and Europe)
PAVE resorts to its own information it collects during the session. Limited data is returned until the provider’s service becomes restored.
United Kingdom
Autodata, Inc. dba Chrome Data (“Chrome Data”)
Autodata provides PAVE with an API service to identify the vehicle information by PAVE passing the vehicle’s VIN in Canada and USA Only.
PAVE resorts to its own information it collects during the session. Limited data is returned until the provider’s service becomes restored.
United States