Legal & Trust

ADVCY Subprocessors

Last updated: 31 August 2026

ADVCY uses selected third-party service providers to operate its platform. Where a provider processes Client Personal Data on ADVCY’s behalf, we assess the provider and put appropriate contractual safeguards in place.

Current subprocessors

ProviderServicePurposePrimary processing locationTransfer safeguard where required
Meta Platforms Ireland Limited / WhatsApp Ireland LimitedWhatsApp Business PlatformDelivery of WhatsApp communications where a Client uses the WhatsApp channelIreland (EU) and United StatesApplicable Meta transfer arrangements: EU Standard Contractual Clauses with the UK Addendum, and the EU-US Data Privacy Framework with its UK Extension where applicable
Google Ireland Limited / Google LLCAI inference (Gemini models)Understanding user requests and generating concierge responsesIreland (EU) and United StatesEU Standard Contractual Clauses with the UK Addendum / UK International Data Transfer Agreement
DigitalOcean LLCCloud hosting and managed PostgreSQL databaseOperating ADVCY infrastructure and storing Service data, including concierge conversation dataUnited States, with EU/UK datacentre regionsEU Standard Contractual Clauses with the UK Addendum / UK International Data Transfer Agreement
Google Ireland Limited / Google LLCGoogle WorkspaceBusiness email and document handling, including privacy and data-rights correspondenceIreland (EU) and United StatesEU Standard Contractual Clauses with the UK Addendum, and the EU-US Data Privacy Framework with its UK Extension where applicable

Performed in-house

Some functions that are commonly outsourced are performed by ADVCY itself on the infrastructure listed above, so no additional subprocessor is involved:

  • generation, distribution and updating of Apple Wallet and Google Wallet passes, including the pass update web service; and
  • application logging, monitoring and observability.

Apple Wallet and Google Wallet

Apple and Google also provide end-user Wallet ecosystems. Their role is not automatically the same as an ADVCY Subprocessor.

Depending on the processing activity, Apple or Google may process information under their own independent terms and privacy responsibilities. Where a provider is acting as an ADVCY Subprocessor for a particular service, it is identified in the Subprocessor list above.

Changes

ADVCY may add or replace Subprocessors as the platform develops. Clients can request notification of material Subprocessor changes by contacting community@advcy.ai.

Client rights relating to new Subprocessors are set out in the ADVCY Data Processing Addendum.

Contact

Questions about a provider or international transfer can be sent to community@advcy.ai.