Legal

Version 1.0 · Effective 2026-07-16

Document: OS Lite Subprocessor List
Version: 1.0
Effective date: July 16, 2026

COVU OS Lite Subprocessors

COVU, Inc. uses the following subprocessors to provide OS Lite. Each is bound by contract to use the data only to provide its service to COVU and to protections materially consistent with our Data Processing Addendum.

SubprocessorPurposeData involvedLocation
SupabaseDatabase, authentication, and storageAccount data; Agency Customer DataUnited States
VercelApplication hosting and deliveryData in transit through the applicationUnited States
GoogleSign-in (OAuth) and Gmail API access for agency-connected mailboxesAccount identifiers; email content the Agency connectsUnited States
AnthropicAI model provider for summaries, drafts, and suggestionsContent submitted to AI features; API terms prohibit training generally available models on this contentUnited States
ResendTransactional email deliveryRecipient addresses and message content for service emailsUnited States
SentryError and performance monitoringTechnical event data; error context (scrubbed of content where feasible)United States

Messaging, telephony, or support providers will be added here only when enabled for OS Lite.

Changes to this list

We will update this page and email agency administrators at least fifteen (15) days before a material new subprocessor begins processing Agency Customer Data. Agencies may object as described in DPA §6. To receive change notices, keep an administrator email current in Account settings.

Questions: dataprotection@covu.com.


Change log

  • v0.9-draft (July 16, 2026) — initial fact-checked list per the approved design; re-verify vendors and locations at publication.
  • v1.0 (July 16, 2026) — published to production pending counsel validation; content unchanged from v0.9-draft.