Nvestiv Capital Corporation uses the service providers below to provide the Services. Each provider may process personal information only to provide its service to us. See our Privacy Policy for how we handle personal information.
Subprocessors
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Hetzner Online | Hosting of the app and databases | All data stored in the Services, including account information and Customer Content | Germany |
| Google (Gemini API) | AI models, document reading (OCR), search, embeddings, file search | Customer Content and prompts sent to produce outputs, including documents and files | US |
| TypeSafe | AI decision models (classification, ranking) | Message and request text sent for classification and ranking | United States |
| ElevenLabs | Voice calls and text-to-speech | Call audio, phone numbers, transcripts, and text to be spoken | US |
| Tigris (Tigris Data) | File storage | Uploaded files, documents and recordings | Global (files are stored in the regions nearest to where they are uploaded and read) |
| Resend | Sign-in links and notification email | Email addresses, names, and notification content | US |
| AgentMail | IRIS email inbox | Emails sent to and from IRIS, including addresses, content and attachments | US |
| Nylas | Connected Gmail/Outlook mail and calendar | Emails, calendar events and contacts from connected accounts | US |
| Telnyx | SMS and phone transport | Phone numbers and message content | US |
| Meta (WhatsApp Business) | WhatsApp messaging | Phone numbers, profile names, and message content | US |
| Stripe | Payments and billing | Billing contact details, payment card details, and payment history | US |
| PostHog | Product analytics and session recording | Usage Data, device and browser data, IP address, session recordings (typed text masked), and account name and email | US |
| Sentry | Error monitoring | Error reports, device and browser data, IP address, and account identifiers | US |
| Trigger.dev | Background job processing | Data needed to run scheduled and background tasks, which can include Customer Content | US |
| Supabase | IRIS Network data processing | IRIS Network profiles and conversation data | United States |
| Browserbase | Browser automation for IRIS | Web pages IRIS visits, saved website logins and cookies used for a task, and form data | European Union |
| Slack | Internal operational alerts | Operational alert content, which can include account identifiers | US |
| PitchBook, Clay, A-Leads | Company and person research data | Names and company details sent as research queries; research results returned | US |
| Public-records sources (OpenSanctions, CourtListener, CanLII, FINRA BrokerCheck, SEC EDGAR, GDELT, Companies House, GLEIF) | Due-diligence lookups | Names of people and companies sent as search queries | Various |
| Exa, Jina, pyannoteAI | Research and audio processing, only when enabled | Research queries and web content (Exa, Jina); meeting audio (pyannoteAI) | US/EU |
| Google Analytics, Microsoft Clarity, Plausible | Website analytics | Website Usage Data, device and browser data, IP address, and session recordings (Clarity) | US/EU |
| Google reCAPTCHA | Bot protection on Website forms | Device and browser data, IP address, and how the page is used before a form is sent | US |
This list may change as we add or replace providers. The "Last Updated" date shows the current version.