Categories of sub-processors
NAVIZIX may use the following categories of sub-processors to operate, secure, support, and improve the Services:
- Cloud hosting providers
- Database providers
- Authentication providers
- Email service providers
- Payment processors
- Error monitoring providers
- Customer support tools
- AI infrastructure providers
- File storage providers
- Communication and notification providers
Current sub-processors
The following named providers process Customer Personal Data on behalf of NAVIZIX. Rows marked “only when enabled” (or “only when selected”) process data only while that feature is switched on. This list is reviewed regularly and updated when material changes occur.
| Provider | Service provided | Processing location |
|---|---|---|
| Lovable (Lovable Cloud) | Application hosting and deployment; managed backend; AI gateway that routes AI requests to Google Gemini and OpenAI models; transactional and sign-in email delivery; connector gateway | European Union & United States |
| Supabase (via Lovable Cloud) | Database, authentication, file storage | Provider cloud region (may be outside the UK) |
| Cloudflare | Edge hosting, CDN, DNS, DDoS protection; hosting of websites built with NAVIZIX (files, address records), their security certificates including customers' own domains (Cloudflare for SaaS), and Turnstile spam checks on contact forms | Global (Cloudflare, Inc., United States; EU-US Data Privacy Framework with UK Extension, and SCCs with the UK Addendum) |
| Google (Gemini API) | AI text and image generation, through the Lovable AI gateway or directly when enabled | United States & European Union |
| OpenAI | AI text generation and reasoning; text-to-speech for voice features | United States |
| Anthropic | Claude AI text generation for advisory features, reviewing AI drafts and the AI website builder: drafting website text from what the customer types and from text extracted from documents they upload (only when enabled) | United States (Anthropic Ireland, Limited contracts for UK customers; SCCs with the UK Addendum in Anthropic's DPA) |
| ElevenLabs | Voice agent sessions (only when enabled) | United States |
| Firecrawl | Reads public web pages you ask NAVIZIX to scan, such as a website scan or brand-book import (only when enabled) | United States |
| Stripe | Payment processing and billing (test mode only until card payments are switched on) | Ireland & United States |
| Resend | Transactional email delivery (only when selected as the email provider) | United States |
| Sentry | Server error monitoring (only when error monitoring is enabled) | United States |
| Pipedream | Integration gateway: connects third-party apps you choose and keeps their sign-in tokens (only when enabled) | United States |
Changes and notifications
NAVIZIX will provide notice of material changes to this list where required by Applicable Data Protection Laws or where commercially reasonable. Customers may subscribe to sub-processor change notifications by emailing info@navizix.com.
International transfers
Some sub-processors are located outside the UK and the EEA. Where transfers of Customer Personal Data take place, NAVIZIX relies on appropriate safeguards such as adequacy decisions, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or the EU Standard Contractual Clauses, as described in our Data Processing Addendum.
Contact
For questions about our sub-processors, contact info@navizix.com.