Trust
Subprocessors
The full list of third parties we share customer data with to operate Viva Ops, what they receive, and where they process it. Updated with at least 30 days' notice before any addition.
AI model providers
SubprocessorPurposeDataRegion
AnthropicClaude family models for AI agents and Decision CopilotPrompt + retrieval context for the user request. Zero-retention enterprise tier.US (with EU residency for EU tenants)
OpenAIGPT family models for AI agents and Decision Copilot (alternate provider)Prompt + retrieval context for the user request. Zero-retention enterprise tier.US (with EU residency for EU tenants)
AWS BedrockSelf-hosted model routing for tenants requiring VPC isolationPrompt + retrieval context for the user request. Hosted within the customer's AWS region.US, EU, UK, APAC (configurable per tenant)
Google Vertex AIAlternate model routing for tenants on GCPPrompt + retrieval context for the user request. Hosted within the customer's GCP region.US, EU, UK, APAC (configurable per tenant)
Infrastructure
SubprocessorPurposeDataRegion
Amazon Web ServicesPrimary infrastructure and storageEncrypted application data, customer workflows, audit logsus-east-1 (default), eu-west-1 (EU tenants), eu-west-2 (UK tenants)
Google CloudSecondary infrastructure for GCP-aligned customersEncrypted application data, customer workflows, audit logsus-central1 (default), europe-west1 (EU tenants)
CloudflareCDN, DDoS protection, WAFRequest metadata (IP, user agent, path) — no application payloadsGlobal edge with traffic terminated in tenant region
Operations & billing
SubprocessorPurposeDataRegion
StripePayment processing and billingBilling contact details, invoice line items. PCI-DSS Level 1 certified.US, with EU/UK presence
PostmarkTransactional email deliveryRecipient email, message subject and body, delivery receiptsUS
PagerDutyIncident response and on-call routingAlert metadata. No customer payloads.US
DatadogOperational telemetry and observabilityService metrics, traces, logs (with PII redacted at the boundary). No customer payloads.US
Subscribe to subprocessor changes. To receive 30 days' advance notice of any new subprocessor we engage, email privacy@vivaopscp.com and we will add you to the notification list. You may object to a new subprocessor under the terms of your data processing agreement.