Auvra Labs
Subprocessors
Auvra uses the providers below to host the product, secure accounts, monitor errors, and support approved AI, billing, and email workflows.
Version subprocessors_2026-10-20_v3 - published 2026-10-20.
United States (sfo1 functions); global edge network
Application hosting
Hosts the web application and server functions in San Francisco (sfo1). Requests pass through Vercel's global edge network.
application requests, including IP address and approximate location, account and workspace metadata, application logs
United States, current project region
Database and authentication
Stores tenant data with row-level security and powers authentication.
account data, workspace data, database records, authentication data
United States
Error monitoring
Receives scrubbed error telemetry. Performance tracing is off. Secrets and unnecessary personal data are not intentionally included.
scrubbed error metadata, route context, release metadata
Vendor-managed model infrastructure
AI inference
Used behind provider controls for CRM note organization, business card reading, search interpretation, lead-quality suggestions, and support answers.
CRM note text with names and titles of contacts on that record, search and intake text, business card images when OCR is used, support questions, structured outputs
Vendor-managed regions
Billing
Conditional billing and payment recipient for Auvra's own billing records when selected as the payment method; not authorized to receive client prospect or contact data.
billing contact data, contract billing records, payment metadata
Vendor-managed regions
Transactional email
Sends account emails such as password resets and invitations, and document signing emails, when enabled. Receives inbound replies only where a workspace turns receiving on.
email addresses, transactional email content
Vendor-managed regions
Auvra's own calendar and outgoing email
Used only for Auvra's own workspace calendar and outgoing email. Calendars and mailboxes a client connects are client systems.
meeting titles, times, and attendee emails, email sent by Auvra staff
How Auvra limits provider use
Optional AI, billing, and email providers are not blanket access to client data. They are routed through workspace settings, provider gates, usage ceilings, and review queues. External outreach and destructive actions still require explicit human approval. Additional external parties that process client personal data for a specific engagement are disclosed to that client under the Data Processing Agreement before use.
With a website visitor's consent, public internet address registries receive the network address being looked up to suggest a company. They are public lookup services, not subprocessors.