Auvra Labs
Auvra
Labs

Auvra Labs

Subprocessors

Auvra uses the providers below to host the product, secure accounts, monitor errors, research leads, enrich business contacts, and support future approved billing or communication workflows.

Version subprocessors_2026-06-14-draft1 - draft pending legal review.

ProviderPurposeDataStatus
Vercel

United States

Application hosting

Hosts the web application and serverless routes. No client outreach is executed by Vercel.

account metadata, workspace metadata, application logs

Active
Supabase

United States, current project region

Database and authentication

Stores tenant data with row-level security and powers authentication.

account data, workspace data, database records, authentication data

Active
Sentry

United States / vendor-managed regions

Error monitoring

Receives scrubbed error telemetry only when production DSNs are configured.

scrubbed error metadata, route context, release metadata

Optional
OpenAI

Vendor-managed model infrastructure

AI inference

Used only behind provider gates for approved AI tasks such as OCR and structured analysis.

prompt inputs, structured outputs, business-card image content when OCR is enabled

Optional
Tavily

Vendor-managed regions

Research provider

Runs public-web lead research only after the active Lead Plan and spend gates allow it.

lead research queries, public-source snippets, source URLs

Optional
Hunter

Vendor-managed regions

Contact enrichment

Enriches contacts only after a lead clears fit, timing, and approved-provider gates.

company domains, contact enrichment requests, business contact candidates

Optional
Apollo

Vendor-managed regions

Contact enrichment

Planned optional enrichment source. Not a default live source.

company domains, contact enrichment requests, business contact candidates

Planned
Stripe

Vendor-managed regions

Billing

Planned enterprise billing system. Client-facing billing brand remains Auvra Labs.

billing contact data, contract billing records, payment metadata

Planned
Resend

Vendor-managed regions

Transactional email

Planned transactional email provider. Cold outbound remains gated separately.

email addresses, transactional email content

Planned
Twilio

Vendor-managed regions

SMS and telephony

Provider credentials exist for future approved SMS/voice work. Automated sending remains blocked until release gates pass.

phone numbers, SMS metadata, approved message content

Blocked future
Google Workspace

Customer tenant and provider-managed regions

Email and calendar connection

Optional customer-connected account path. Auvra does not connect it by default.

connected mailbox metadata, calendar metadata, approved message drafts

Planned
Microsoft 365

Customer tenant and provider-managed regions

Email and calendar connection

Optional customer-connected account path. Auvra does not connect it by default.

connected mailbox metadata, calendar metadata, approved message drafts

Planned

How Auvra limits provider use

Optional research, enrichment, AI, communication, and billing providers are not blanket access to client data. They are routed through workspace settings, provider gates, usage ceilings, and review queues. External outreach and destructive actions still require explicit human approval.

TrustTerms of ServicePrivacy PolicyVulnerability disclosureStatusSign in