Subprocessor List

Subprocessor List

LAST UPDATED: July 5, 2026


To support SOVA in delivering its Services, SOVA may engage third party service providers to assist SOVA with its data processing activities. When we work with these service providers in our capacity as a data processor, the third-party service provider is a sub-processor of SOVA (“Sub-processor”).


This page identifies the Sub-processor, describes where they are located, and what services they provide to us. Before engaging any Sub-processor, we perform extensive due diligence, including detailed security and legal analysis. We do not engage a Sub-processor unless our quality standards are met. Our Sub-processors are all subject to contract terms that enforce compliance with applicable data protection laws, except as noted below.


SOVA currently uses the following Sub-processors:

Sub-processor
Have DPA
Purpose
Location of Sub-processor
 Data Disclosed
Ably
  
 Real-time messaging and data delivery
 United Kingdom
 Device identifiers, device IP, message content, location identifiers, user identifiers, names, dates, times, and notification data
Amazon Web Services

yes

 Cloud hosting, storage, CDN, email delivery, SMS delivery, database services, media processing, and image/face analysis
 United States of America
 Customer-provided data, including names, email addresses, phone numbers, addresses, user IDs, employee IDs, device IDs, device IPs, access dates/times, device data, location data, images, video, audio, incident data, visitor data, shipping data, and, where enabled, biometric/face image data for Persons of Interest
Atlassian Jira
  
 Issue tracking and support workflow
 United States of America
 Bug reports, support details, descriptions, labels, and optional attachment links submitted through SOVA workflows
Brightcove (Zencoder)
yes
 Video optimization and transcoding
 United States of America
 Video content and related media metadata
EasyPost
  
 Shipping rates, labels, address validation, and shipment processing
 United States of America
 Sender and recipient names, addresses, phone numbers, email addresses, parcel dimensions, parcel weight, carrier selections, tracking data, and customs information for international shipments
Face++ (Megvii)
  
 Face detection
 Singapore / China / United States of America
 Face images and related image metadata when face detection features are used
Google
  
 Maps, Places, address lookup, static maps, Firebase Cloud Messaging, QR/chart services, and mobile app services including crash reporting where enabled
 United States of America
 Addresses, business/place names, latitude/longitude, device tokens, device identifiers, notification content, mobile app diagnostic data, and related usage metadata
GoShippo
yes
 Shipping rates, labels, tracking, and shipment processing
 United States of America
 Sender and recipient names, addresses, email addresses, phone numbers, parcel dimensions, parcel weight, carrier selections, tracking data, and customs information for international shipments
IPStack / ip-api.com / IPInfoDB
  
 IP geolocation and security event enrichment
 United States of America / International
 IP address and approximate geolocation information such as city, region, country, and related network metadata
Mailgun
  
 Transactional email delivery and email event tracking
 United States of America
 Email addresses, sender information, subject lines, email content, message IDs, delivery status, and email event metadata
NHTSA vPIC
  
 Vehicle identification and vehicle data lookup
 United States of America
 Vehicle identification number and vehicle make, model, year, and related vehicle attributes
Okta
  
 Single sign-on and authentication
 United States of America
 User email address, authentication tokens, login status, and related authentication metadata
OpenAI
  
 AI-generated summaries, daily briefs, report analysis, and structured data extraction
 United States of America
 Report text, incident summaries, activity details, package label text, prompts, generated responses, and related usage metadata. SOVA configures AI brief requests to minimize personal data where supported.
Open-Meteo
  
 Weather data lookup
 Germany / European Union
 Latitude, longitude, date, time, and weather query parameters
Plate Recognizer
  
 Automated license plate recognition (ALPR) for the optional Vehicle Management license-plate capture feature, where enabled by Customer
 United States of America
 License plate images captured through the SOVA mobile application, and decoded plate text and confidence scores. This Sub-processor retains submitted images for up to 30 days under its own standard terms. See note below.
QuickChart / QRServer
  
 QR code generation
 United States of America / International
 QR code payloads such as authentication setup URLs, mobile capture URLs, and temporary tokens
Sinch
yes
 Telephony and SMS delivery
 United States of America
 Mobile number, SMS message content, delivery status, and related messaging metadata
Slack
  
 Customer-configured operational alerts and notifications
 United States of America
 Alert content, incident or activity summaries, location identifiers, user names, dates, times, and related notification metadata, depending on customer configuration
Stripe
yes
 Payment processing and payment reconciliation
 United States of America
 Payment transaction details, payment token or charge identifiers, amount, refunds, disputes, shipping charges, recipient contact details where included in payment/shipping workflows, and related payment metadata
Twilio
yes
 Telephony, SMS, voice calls, emergency calls, and verification codes
 United States of America
 Phone numbers, verification codes, SMS message content, call metadata, call status, and related telephony delivery metadata

 

A note on Plate Recognizer. Unlike SOVA's other Sub-processors, Plate Recognizer is not currently covered by a negotiated data processing agreement — only its standard, publicly available terms of service and privacy policy. SOVA is pursuing improved data-processing terms with this provider and will update this page if and when they are obtained. Customers using the optional ALPR feature should account for this in the site-level ALPR usage policy required under applicable law before enabling the feature.

 

Previous versions:

  • February 26, 2019

 

Our business needs may change from time to time. For example, we may deprecate a Sub-processor to consolidate and minimize our use of Sub-processors. Similarly, we may add a Sub-processor if we believe that doing so will enhance our ability to deliver our Services. We will periodically update this page to reflect additions and removals to our list of Sub-processors.

 

For more information on SOVA’s privacy practices, please consult our Privacy Policy.

    • Related Articles

    • How do I add someone to the visitor watch list?

      The visitor watch list allows your company to add names to a list, for visitors that might try to gain access to your facility. By navigating to Visitor > Visitor Watch List, and complete these fields: Name of visitor to add to the watch list The ...

    • Setting a Watch List for a POI

      Setting a watch list for a POI allows you to be notified if another business in your area encounters a POI that is known to your system, providing that business is within the watch radius that you set for the POI. Of course, the other business must ...

    • Communication Screen

      The communication screen found at   Settings > Communication   is where you can setup distribution lists of individuals to receive email and/or SMS notifications when certain events happen within SOVA. There are currently 47 different distribution ...

    • Equipment Listview

      The equipment listview, accessible by navigating to Equipment > List Equipment, is the jumping off spot for managing your equipment assets in SOVA. A description of what each screen element does is listed below: The left navigation menu in SOVA can ...

    • Incident Report Listview

      The Incident Report listview in SOVA allows you to see all incident reporting from a single screen. From here, you can view and edit IR's, review media attached to IR's like images, audio and video files, PDF's and WORD documents. There are many ...