Sub-processors
Corveria ehf. ("Corveria", "we") operates Anna, an AI customer-service assistant. To deliver it we engage the third-party processors ("sub-processors") listed below. We act as a processor for the personal data our business customers (the controllers) send through Anna, and as a controller for our own account and billing data. This list lets our customers complete their own records of processing and transfer assessments.
We maintain a written data processing agreement, including the EU Standard Contractual Clauses or a Data Privacy Framework reliance where required, with each sub-processor. We remain fully responsible for our sub-processors' performance.
Transfer-safeguard legend
- EEA: processed inside the European Economic Area. No Chapter V transfer.
- Adequacy: the destination country benefits from a European Commission adequacy decision. No further safeguard required.
- DPF: the importer self-certifies under the EU-US Data Privacy Framework (an adequacy route for certified US organisations).
- SCCs: transfer relies on the 2021 Standard Contractual Clauses plus a documented Transfer Impact Assessment.
Core sub-processors (always engaged)
| Sub-processor | Purpose | Personal data received | Location | Safeguard |
|---|---|---|---|---|
| OpenAI | AI language models: generates chat replies and performs related language processing | End-user chat messages and conversation context | OpenAI Ireland Ltd (EEA contracting entity); processing in the United States | SCCs + Transfer Impact Assessment (per OpenAI's DPA) |
| Anthropic, PBC | AI language models: generates chat replies and performs related language processing (including internal classification and escalation summaries) | End-user chat messages and conversation context | United States | SCCs + Transfer Impact Assessment (not DPF) |
| Amazon Web Services (AWS) | Generates text embeddings and reranks search results (Cohere Embed and Rerank models run within AWS) | Knowledge-base content and end-user query text | EU (Frankfurt) | EEA |
| Supabase | Database, authentication, and file storage for the whole platform | All stored application data: accounts, conversations, messages, escalation contact details, uploaded knowledge files | Ireland (EEA) | EEA |
| Resend | Sends transactional email (escalation alerts, confirmations, invitations) | Recipient email address and message content | United States | DPF |
| Cloudflare | Content delivery, DNS, denial-of-service protection, and chat bot protection (Turnstile) | Network/connection data (including IP address) in transit; for Turnstile checks also the TLS fingerprint, User-Agent header, page sitekey, and page origin | Global edge network | DPF |
| Hetzner Online GmbH | Hosts the application server | All request data in transit and at runtime | Germany (EEA) | EEA |
| Functional Software, Inc. (Sentry) | Error monitoring and diagnostics | Technical error context; may incidentally include request fragments | Germany (EEA) | EEA |
The embedding and reranking models are Cohere models hosted within AWS (Amazon Bedrock) in the EU; Cohere itself receives no data.
Optional sub-processors (engaged only if a customer uses the feature)
| Sub-processor | Purpose | When engaged | Location | Safeguard |
|---|---|---|---|---|
| Firecrawl (SideGuide Technologies, Inc.) | Renders and extracts text from a customer's website for knowledge ingestion | Only if the customer runs a website scan | United States | SCCs + TIA |
| Google LLC (Calendar API) | Reads availability and creates bookings | Only if the customer connects Google Calendar | United States | DPF |
| Bókun (TripAdvisor) | Reads tours/products and bookings | Only if the customer connects Bókun | Iceland / EEA | EEA |
| Meta Platforms, Inc. (Messenger / Instagram) | Inbound and outbound messages on the customer's connected Facebook or Instagram page; visitor display-name lookup | Only if the customer connects a Messenger or Instagram page | Meta Platforms Ireland Ltd (EEA contracting entity); processing in the United States | DPF |
Customer-activated integrations (the customer is responsible)
When a customer enables an alert integration, escalation summaries are sent to a destination the customer controls and configures (their own webhook or chat ID). For these the customer is the controller of that onward transfer and is responsible for its lawful basis and any consent. Current targets: Telegram and Slack. These are not Anna sub-processors; we transmit only on the customer's instruction.
Changes to this list
We will give customers prior notice of any intended addition or replacement of a core sub-processor through email to account owners and a dated changelog on this page, with a reasonable period to object. To subscribe to change notifications or to raise an objection, email us at [email protected].
Changelog
- 2026-08-02: AI model roles clarified. Both OpenAI and Anthropic may generate chat replies and process conversation content in the ordinary course of the service; OpenAI was previously listed as engaged only when the primary provider was unavailable. Which model serves a given conversation is an operational choice that may change over time. No sub-processor was added or removed; both remain under the same SCC + Transfer Impact Assessment safeguards.
- 2026-06-23: initial published list.
Version 1.1.1. Last updated 2026-08-02.