Aevaro · Legal
Sub-processors
Last updated: May 2, 2026.
This page lists the third-party service providers ("sub-processors") we use to operate aevaro.com. Each vendor appears here only with respect to the marketing site; products that Aevaro offers may use a different (and separately documented) list.
We update this list whenever we add or remove a sub-processor. Where applicable law requires advance notice of a change, we will provide it.
Active sub-processors
| Vendor | Purpose | Where data is processed | Categories of data |
|---|---|---|---|
| Vercel, Inc. | Hosting, build/deploy, edge runtime, image optimization, real-user monitoring | United States, with edge presence in multiple regions | Routine technical data (IP, headers), build artifacts, anonymous performance metrics |
| Sanity.io | Content management for marketing copy and editorial assets | European Economic Area / United States | Authored marketing content; not used for visitor data |
| Resend, Inc. | Transactional email delivery (contact-form submissions to us) | United States | Contact-form submissions (name, work email, company, message) |
| Plausible Analytics | Privacy-first web analytics, cookieless | European Union (Germany) | Aggregate usage; no personally identifying information |
| Sentry (Functional Software, Inc.) | Error monitoring and reporting | United States | Application error events; configured to exclude request bodies and form contents |
| GitHub, Inc. | Source code hosting and CI/CD for the Site | United States | Source code only; no visitor data |
| OpenAI, L.L.C. | Build-time generation of editorial reference imagery (not visitor-facing requests) | United States | Build-time prompts authored by us; no visitor data |
| Anthropic, PBC | Build-time content scaffolding (not visitor-facing requests) | United States | Build-time prompts authored by us; no visitor data |
What each vendor does and does not see
- Vercel sees the routine technical data any web server sees (IP, browser, requested page) and the assets and code we deploy. It is contractually limited to processing that data only as needed to serve the Site.
- Sanity stores marketing copy authored by us. It does not receive personal information about Site visitors.
- Resend receives the contents of contact-form submissions so it can deliver them to our internal inbox. It is contractually limited to that purpose.
- Plausible sees that a visitor reached a page; it does not see who the visitor is, does not set tracking cookies, and does not aggregate cross-site behavioral profiles.
- Sentry sees error events and stack traces. We configure it to exclude request bodies and form contents so that personal information you submit does not appear in error logs.
- GitHub stores source code and runs CI on commits. It does not see Site visitor data.
- OpenAI and Anthropic are used only at build time, by us, to generate or scaffold editorial content. They do not receive any Site visitor data. The configurations we use prohibit training on data we send.
What we have intentionally excluded
We do not currently use, and do not currently send Site visitor data to:
- Advertising networks or marketing pixels (Meta, Google Ads, LinkedIn Ads, etc.)
- Customer-data platforms (Segment, RudderStack, etc.)
- Session-replay tools (FullStory, Hotjar, etc.)
- Behavioral-tracking enrichment (Clearbit, RB2B, etc.)
If we add any of the above in the future, we will update this list and the Privacy Policy before we begin using them.
Questions
For questions about how we use a particular vendor, or to request the relevant data-processing addendum, email privacy@aevaro.com.