Service Delivery Sub-Processors & Processors
The scope of this Service Delivery Sub-Processors & Processors section is to help answer these frequently asked questions:
“Is your product dependent upon any third-party platforms or services to operate successfully? If so, please describe these dependencies and how you manage third-party service disruptions.”
Subprocessors & Processors
Discovery Loft may use third-party data processors who may have access to specific customer data (a sub-processor) in operational and functional activities to provide support and deliver the PAVE services.
Due Diligence Discovery Loft undertakes a thorough review of each potential vendor's access to customer data. This review ensures levels of privacy and security are at a minimum equivalent to those provided by Discovery Loft in our Information Security Policy which includes minimizing the amount of customer data processed.
Table #1 - Infrastructure Sub-processors – Service Data Storage and Processing
| Entity Name | Purpose | Service Disruption Backup | Entity Country |
|---|---|---|---|
Google Inc. | Cloud Service Provider | Deploy new clusters or utilize AWS. | United States |
Amazon Web Services, Inc. | Cloud Service Provider | Backups only, use Google Cloud for backup as an alternative. | United States, Ireland, Germany, Japan |
Table #2 - Service Specific Sub-processors
| Entity Name | Purpose | Service Disruption Backup | Entity Country |
|---|---|---|---|
Twilio, Inc. | Twilio’s development platform provides the APIs that PAVE uses to facilitate SMS and text functionality. | Send a link as an email instead using SES services. | United States |
Amazon Web Services, Inc | PAVE uses Amazon Simple Email Service (SES) to send transactional emails generated by the PAVE services. | N/A | United States, Ireland, Germany, Japan |
Google Inc. | Discovery Loft’s Email Provider, including Google Analytics, Data Storage | N/A | United States |
Hubspot, Inc. | CRM and customer support software | N/A | United States |
Stripe, Inc. | Stripe development platform provides APIs for PAVE to utilize secure credit card processing for subscription service users. | N/A | United States, Ireland |
Slack Technologies, LLC, a Salesforce company | Slack provides direct communication channels for PAVE’s client teams and our customers, PAVE also uses Slack for automated notifications for system monitoring. | N/A | United States |
Zoom Video Communications, Inc. | Video communication & collaboration solution | United States | |
Auth0, Inc. | PAVE's optional authentication mechanism for OAuth2-based logins during Connector registration. | System registration process. | United States |
Datadog, Inc. (“Datadog”) | Datadog provides PAVE with content distribution, security and abuse prevention and DNS services for traffic transmitted to and from the services. | N/A | United States |
Snyk Limited | Sync finds and automatically fixes vulnerabilities in code, open source dependencies, containers, and infrastructure as code — all powered by Snyk’s industry-leading security intelligence. | N/A | United Kingdom |
BrowserStack, Inc | BrowserStack provides PAVE’s QA team with an automated testing platform for testing websites and mobile apps. | N/A | India |
Kelly Blue Book (Cox Automotive, Dealertrack Canada) | Kelly Blue Book provides PAVE with an API service to obtain vehicle valuations in Canada and USA Only. | N/A | United States, Canada |
vAuto (Cox Automotive) | vAuto is an alternative integration that can be initiated by PAVE customers to send session information to their vAuto service in Canada and USA Only. | N/A | United States |
Solera - Carweb Limited, | Carweb provides PAVE with an API service to identify the vehicle information by PAVE passing the vehicle’s registration number or VIN. (only available for UK and Europe) | PAVE resorts to its own information it collects during the session. Limited data is returned until the provider’s service becomes restored. | United Kingdom |
Autodata, Inc. dba Chrome Data (“Chrome Data”) | Autodata provides PAVE with an API service to identify the vehicle information by PAVE passing the vehicle’s VIN in Canada and USA Only. | PAVE resorts to its own information it collects during the session. Limited data is returned until the provider’s service becomes restored. | United States |
Last updated