Subprocessors
Last updated: August 2, 2026
Alyvon is a product of Skyyr Digital LLC. We use the third-party providers listed below to operate the Services. Each has access to customer data only as necessary to perform its function, and each is bound by contractual confidentiality and data protection obligations.
This page is referenced by Section 11 of our Terms of Service and Section 4 of our Privacy Policy.
Infrastructure and platform
| Provider | Function | Data it may process | Location |
|---|---|---|---|
| Supabase | Primary database, authentication, file storage, serverless functions | Account data, briefs, deliverables, organizational context, usage records | United States (East US, North Virginia) |
| Google Cloud Platform | Agent execution service hosting (Cloud Run) | Briefs, agent output, execution logs, transient customer data during a run | United States (us-central1) |
| Vercel | Web application and marketing site hosting, and AI Gateway routing for generative media | Account data in transit, request logs, IP addresses, generative media prompts and generated assets routed through Vercel AI Gateway | United States and global edge network |
| E2B | Isolated sandbox execution for code and file generation | Briefs, attachments, generated files, transient execution state during a single run | United States |
AI model providers
| Provider | Function | Data it may process | Location |
|---|---|---|---|
| Anthropic | Large language models powering Directors, specialists, and orchestration | Briefs, attachments, organizational context, agent output | United States |
| Google (accessed via Vercel AI Gateway) | Generative image and video models | Prompts and generated media assets for those specific features | United States |
Generative media traffic is routed through Vercel AI Gateway, so Vercel is a subprocessor for that data path, listed under Infrastructure and platform above, in addition to hosting.
Model training position, confirmed 2026-08-02. No AI provider in this table trains generative models on data we transmit on your behalf.
- Anthropic. Our commercial terms are no-training.
- Google. Google does not use data sent through its paid enterprise or developer interfaces, such as the Gemini API and Vertex AI, to train its generative models. Inputs are transiently logged by Google for safety and abuse monitoring.
- Vercel AI Gateway. Routes requests without training on the data passing through it.
Integrations
| Provider | Function | Data it may process | Location |
|---|---|---|---|
| Composio | OAuth broker and third-party tool execution for Connected Services | Third-party access tokens, data retrieved from and written to your connected applications | United States |
Any third-party application you connect to Alyvon, for example your email provider, CRM, or code repository, whether connected through Composio or through a direct integration such as your own GoHighLevel account, is a system you control rather than a subprocessor of ours. Data flowing to it does so at your direction and is governed by that provider’s own terms.
Business operations
| Provider | Function | Data it may process | Location |
|---|---|---|---|
| Stripe | Payment processing and subscription billing | Billing contact details, payment method tokens, transaction records | United States |
| Resend | Transactional and notification email delivery | Recipient email addresses, email content, and delivery, bounce, and complaint events | United States (North Virginia, us-east-1) |
| GoHighLevel | Booking, lead capture, and CRM for our marketing site (scheduling and contact forms), and delivery of generated media where we operate GoHighLevel on your behalf | Prospect and lead contact details submitted through the marketing site booking widget and forms, and generated media delivered to a connected location | United States (Ashburn, Phoenix, Dallas) |
| PostHog | Product analytics | Usage events, feature interaction, pseudonymous user identifiers | United States (US Cloud) |
| Sentry | Error monitoring and performance tracing | Error events, stack traces, run and organization identifiers. Content is scrubbed before transmission. | United States |
| Google (Tag Manager, analytics, and advertising tags) | Marketing website tag management, analytics, and advertising measurement | Website visitor data, IP addresses, referral data, cookie identifiers. Marketing site only, not the application. | United States |
Providers we use for our own sales and marketing
These providers do not touch customer data inside the Services. They process business contact details of prospects and marketing contacts, for which Alyvon is the controller. They are listed here so that anyone exercising a privacy right over their own contact data can see where it sits.
| Provider | Function | Data it may process | Location |
|---|---|---|---|
| Apollo | Prospect sourcing and contact enrichment | Business contact details, company data | United States |
| Instantly | Outbound email delivery | Prospect email addresses, message content, engagement and bounce events | United States |
| HeyReach | LinkedIn outbound sequencing | LinkedIn profile data, connection and message activity | European Union (HeyReach Inc OU, an Estonian entity). Specific hosting region not publicly disclosed. |
| GoHighLevel | CRM of record for prospects and pipeline | Prospect contact details, pipeline stage, communications history | United States (Ashburn, Phoenix, Dallas) |
Changes to this list
We may add or replace subprocessors as the Services evolve. We will update this page and, for customers with an executed data processing addendum, provide notice as required by that addendum before a new subprocessor begins processing personal data.
Questions: legal@alyvon.com