SUB-PROCESSORS.
List of Wavenure sub-processors
Last updated
21 October 2026
Applies to
Business users of Portfolio Gateway and Cognitive Pro
Notice of changes
30 days before any addition or replacement (DPA 8.3–8.4, Terms 14.3)
Wavenure uses the providers listed below to deliver its services. When they process personal data on behalf of our business customers, they act as sub-processors under section 8 of the Wavenure DPA.
We inform business customers at least 30 days before adding or replacing a sub-processor. Within that period a customer can object by writing to [email protected]; if no solution is found, they can terminate the affected service and receive a pro rata refund of the unused period.
Portfolio Gateway
| Provider | Service | Data processed | Location / region | Product |
|---|---|---|---|---|
Amazon Web Services EMEA SARL | Hosting of the service, databases (RDS) and backups | All service data: account, portfolios, reports, chat history | EU — eu-south-1 (Milan, Italy) | Portfolio Gateway |
Amazon Web Services EMEA SARL — Amazon Bedrock | AI model (Anthropic Claude) for Analysis reports and Polaris chat answers | Portfolio data and question text, without account identifiers. Not stored or used for training | EU — eu-central-1 (Frankfurt, Germany) | Portfolio Gateway |
Stripe Payments Europe, Limited (Ireland) | Payments, subscriptions and tax documents | Billing data and payment method; card numbers never reach Wavenure | EU and USA — Stripe, LLC: EU-U.S. Data Privacy Framework and standard contractual clauses | Portfolio Gateway |
Sendinblue SAS (Brevo), France | Transactional emails | Email address, plan and subscription details; billing data in internal payment notices; no portfolio data | EU — access from USA (Data Privacy Framework and standard contractual clauses) and India (standard contractual clauses) | Portfolio Gateway |
Google Cloud Italy S.r.l. — Google Workspace | Wavenure mailboxes (support, privacy requests, administration) | Emails and attachments sent to Wavenure, which may contain customer data | EU and other countries, including USA — Google LLC: Data Privacy Framework and standard contractual clauses | Portfolio Gateway |
Amazon Web Services EMEA SARL
Service
Data processed
Location / region
Product
Amazon Web Services EMEA SARL — Amazon Bedrock
Service
Data processed
Location / region
Product
Stripe Payments Europe, Limited (Ireland)
Service
Data processed
Location / region
Product
Sendinblue SAS (Brevo), France
Service
Data processed
Location / region
Product
Google Cloud Italy S.r.l. — Google Workspace
Service
Data processed
Location / region
Product
Cognitive Pro
| Provider | Service | Data processed | Location / region | Product |
|---|---|---|---|---|
Amazon Web Services EMEA SARL | Infrastructure hosting and managed database (RDS) | Data of the customer's users: identification, contact and profile data, usage metadata, portfolio configurations | EU — eu-south-1 (Milan, Italy) | Cognitive Pro |
Google LLC — Google Workspace | Email service | Emails exchanged with customers | EU | Cognitive Pro |
ClickUp, LLC | Help desk and ticketing | Support requests | USA — standard contractual clauses | Cognitive Pro |
Amazon Web Services EMEA SARL
Service
Data processed
Location / region
Product
Google LLC — Google Workspace
Service
Data processed
Location / region
Product
ClickUp, LLC
Service
Data processed
Location / region
Product
Transfers outside the European Economic Area rely on an adequacy decision (including the EU-U.S. Data Privacy Framework for certified recipients) or on the standard contractual clauses approved by the European Commission (DPA section 9).