Configuration matters. Not every provider receives data from every customer. Optional providers process data only when the related feature or integration is enabled. The applicable order or service configuration identifies regional and product-specific commitments. Intravo policy requires pre-use risk review, appropriate written privacy and security obligations, and at least annual review of material vendors and subprocessors. A provider listing does not authorize a transfer outside an approved EU processing path; the Data Residency standard applies to every enabled feature and subprocessor.
Core platform and identity
| Provider | Purpose | Data categories | Processing region |
|---|---|---|---|
| Amazon Web Services | Cloud hosting, storage, database, security, and selected managed service functions | Account, application, meeting, file, operational, and feature-specific content | Contracted US or EU region; other regions only when configured and approved |
| Cloudflare | DNS, delivery, edge security, object storage, edge computing, and configured real-time delivery | Request metadata, network identifiers, public assets, and content handled by configured services | Cloudflare network; storage and compute location follow configured service and contract terms |
| Google Cloud / Firebase | Configured application hosting, messaging, storage, or mobile services | Account identifiers, device tokens, application data, and operational metadata | Configured service region |
| Microsoft | Microsoft identity and authentication integration | Identity attributes, authentication events, and tenant identifiers | Customer and tenant configuration |
| Google Identity | Optional sign-in integration | Identity attributes and authentication events | Provider infrastructure |
| Optional sign-in integration | Identity attributes and authentication events | Provider infrastructure |
Communications and real-time services
| Provider | Purpose | Data categories | Status |
|---|---|---|---|
| Twilio / SendGrid | Configured email, messaging, and communications delivery | Contact details, message content, delivery and call metadata | Used by configured features |
| OneSignal | Push notifications | Device tokens, notification content, and delivery metadata | Used by configured features |
| Vonage | Optional video and real-time communications | Audio/video streams and connection metadata | Optional |
Speech and language services
Speech, transcription, translation, and synthesis providers receive data only when the related feature is enabled. Intravo-hosted processing may be available for selected configurations; in that configuration, customer content is not sent to a third-party model provider for that function.
| Provider | Purpose | Data categories | Status |
|---|---|---|---|
| Google Cloud | Speech recognition, translation, or speech synthesis | Audio, text, language settings, and service metadata | Optional |
| Deepgram | Speech recognition | Audio, transcript output, and service metadata | Optional |
| Soniox | Speech recognition | Audio, transcript output, and service metadata | Optional |
| ElevenLabs | Speech synthesis or related audio features | Text, generated audio, voice settings, and service metadata | Optional |
Operations and diagnostics
| Provider | Purpose | Data categories | Status |
|---|---|---|---|
| Datadog | Configured monitoring, logging, and diagnostics | Operational telemetry, identifiers, errors, and security events; content is minimized by configuration | US or EU site according to deployment and contract |
| IPinfo | IP-derived region and network information | IP address and derived network or approximate location data | Used where configured |
Changes and questions
Intravo reviews providers before use and updates this page when a material customer-data subprocessor changes. Contracted customers may request change notices by emailing privacy@intravo.com. A customer may raise a documented objection under its DPA.
Internal business tools that do not process customer data are not listed as customer subprocessors. Provider links above lead to the provider's own current privacy or assurance information.