These providers process personal data on behalf of LIMITLESS KNOWLEDGE, publisher of Narvy, under our Privacy Policy and, for customer data, our Data Processing Agreement. Their names are available on request at dpo@narvy.io.
| Sub-processor | Purpose | Data received | Location |
|---|---|---|---|
| Hosting provider | Servers, database, storage, backups | Data stored on its servers | Germany (EU) |
| AI provider established in the EU | Scan summaries, explanations, false-positive triage, automated fixes | Finding details and, where needed, a minimised code excerpt | EU |
| Payment provider | Payments and subscriptions | Email, billing details, card data entered on its page | EU, with transfers to the US |
| Transactional email provider | Service emails | Recipient address, name, message content | US |
| Error-monitoring provider | Error monitoring | Error traces, request context, account identifier | EU data region; US company |
| Anti-bot provider | Registration form and store readiness check | IP address, browser signals | US |
| Appointment-scheduling provider | Booking a remediation consultation | What you enter in the booking form | US |
Apart from the hosting provider, none of these receives your binaries or source code; the AI provider receives only finding details and code excerpts. Transfers to the US rely on the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU-US Data Privacy Framework.
Some interface assets load from Cloudflare cdnjs, jsDelivr and Google Fonts. Your browser contacts them directly; they see your IP address and browser, nothing else.
Customers are notified of a new or replaced sub-processor as set out in section 7 of the Data Processing Agreement.
Related documents: Privacy Policy, Data Processing Agreement, legal notice.