Vendor list
Who processes data for us.
These companies process personal data so Adverizeo can run, each for the job shown next to it.
Last updated
Current list
Every company, and what it receives.
| Company | What it does | Data | Location | Transfer safeguard |
|---|---|---|---|---|
| RailwayRailway Corporation | Hosts the app, database and background jobs | All account data and everything you create in Adverizeo | Netherlands (EU) | Stored in the EU. US company: EU–US Data Privacy Framework and SCCs |
| Amazon Web ServicesAmazon Web Services, Inc. | Stores files you upload and files we generate (S3) | Uploaded product photos, documents and ad reports, and generated images | Frankfurt, Germany (EU) | Stored in the EU. US company: EU–US Data Privacy Framework and SCCs |
| OpenAI | Writes copy and creates or edits images | Briefs, brand details, uploaded photos and documents, and client report data sent with a request, which can include personal data | United States | SCCs in its DPA |
| Anthropic | Writes copy and reviews ads for compliance | Briefs, brand details, draft ads and client report data sent with a request, which can include personal data | United States (requests may run in other regions) | SCCs in its DPA |
| StripeStripe, LLC | Takes payments and manages subscriptions | Name, email, billing address, card details (entered with Stripe, never stored by us) | United States | EU–US Data Privacy Framework and SCCs |
| ResendPlus Five Five, Inc. | Sends account emails, optional update emails and the newsletter | Email address, name, email content and delivery logs | United States | SCCs in its DPA |
| Cloudflare TurnstileCloudflare, Inc. | Checks for bots on sign-in, sign-up, password reset and our public forms | IP address, browser and connection details | Cloudflare’s global network (US company) | SCCs in its DPA |
| Google Analytics 4Google LLC | Measures how the public website is used | Pages viewed, device and approximate location (only after consent for visitors on a European time zone) | Google data centers worldwide (US company) | EU–US Data Privacy Framework and SCCs |
| Namecheap Private EmailNamecheap, Inc. | Hosts our support and contact mailboxes | Messages you send us, including through the contact form, and our replies | United States | SCCs in its DPA |
Changes
Notice first, and a right to object.
- 1
We post a new or replacement subprocessor on this page 30 days before it starts processing your data.
- 2
If you object, tell us through the contact form within those 30 days and we’ll work through your concern.
- 3
If we can’t resolve it, you can stop using Adverizeo and export your data first.
Change log
- October 2, 2026
Listed Namecheap Private Email, which hosts our support mailboxes and this page had left out.
- October 1, 2026
Listed Cloudflare Turnstile and Google Analytics 4, which this page had left out. Corrected Stripe and AWS locations.
- September 5, 2026
Resend replaced Mailgun for email.
Concern about a subprocessor?
Whether it’s about a company on this list or a change we’ve announced, we’ll look into it.