Subprocessors
Third parties that process customer data on behalf of Brightvale.
1. Overview
Brightvale engages subprocessors to provide hosting, security, communications, and operational services. We require subprocessors to protect data consistent with our DPA and applicable law.
We provide 30 days' notice before adding a new subprocessor that processes customer personal data, where contractually required, so customers may object on reasonable grounds.
2. Current subprocessors (platform)
The following categories apply to corporate platform services:
- Cloud infrastructure & CDN — United States (primary), EU optional
- Database & object storage — United States
- Email delivery — United States
- Error monitoring & observability — United States
- Customer support ticketing — United States
- Payment processing — United States (billing metadata only)
- Identity & SSO (enterprise) — per customer configuration
3. Product-specific subprocessors
Individual Brightvale products may use additional vendors for domain-specific features (e.g., analytics, document generation). Those are listed in product-specific annexes provided during procurement.
Request the latest annex for your subdomain at compliance@brightvale.co.
4. Changes
Subscribe to subprocessor updates by emailing compliance@brightvale.co with subject "Subprocessor notifications" and your organization name.