Sub-processors
Last updated: January 2026
This page lists the third-party sub-processors authorized by CVEDIA Pte. Ltd. to process personal data on behalf of customers in connection with CVEDIA-RT products and services.
A sub-processor is a third party engaged by CVEDIA to assist in providing the services and who may process personal data under CVEDIA's instructions.
Note: CVEDIA is incorporated in Singapore but operates as a fully remote company. No personal data is stored in Singapore. All data is stored in cloud infrastructure located in the European Union and the United States, as detailed below.
CVEDIA conducts due diligence on all sub-processors and enters into data-processing agreements with them that are consistent with applicable data-protection laws, including the GDPR, UAE PDPL, DIFC Data Protection Law, CPRA, and PIPEDA. US-based sub-processors are certified under the EU-U.S. Data Privacy Framework (DPF) and/or operate under Standard Contractual Clauses.
Sub-processor List
| Sub-processor | Purpose | HQ | Data Location | DPF Certified |
|---|---|---|---|---|
| Cloudflare | CDN, DNS, website security and hosting | United States | EU, US | Yes |
| Google Cloud / Google Workspace | Cloud storage, email services, productivity tools | United States | EU, US | Yes |
| Microsoft Azure | Cloud infrastructure, compute, storage, authentication | United States | EU, US | Yes |
| Cloudinary | Media storage | United States | US | Yes |
| Atlassian | Project management, customer support (Jira, Confluence, JSM) | Australia | EU, US | Yes |
| OpenAI | AI/ML services (API, ChatGPT) | United States | US | No (SCCs) |
| Anthropic | AI/ML services (Claude API) | United States | US | No (SCCs) |
| Mailchimp | Email marketing, newsletters | United States | US | Yes |
| Miro | Visual collaboration, whiteboard | United States | EU, US | Yes |
Sub-processor Changes
CVEDIA may update this list from time to time. Customers will be notified of any material changes by:
- updating this page, and/or
- email notification where contractually required.
Customers may object to a new sub-processor on reasonable data-protection grounds by contacting: [email protected]
Questions
If you have questions about CVEDIA's sub-processors or data-processing practices, contact: [email protected]