Trust Center
Subprocessors
Privion provides 30 days' notice via this page before adding or changing a subprocessor that processes client personal data.
Microsoft 365
Yes (DPA)Privion corporate productivity and collaboration
- Region
- United States / global
- Certifications
- SOC 2
- ISO 27001
Microsoft Azure
Yes (DPA)LightPath and PAnalytics hosting; corporate infrastructure
- Region
- West US 2 (LightPath, PAnalytics)
- Certifications
- SOC 2 Type II
- ISO 27001
- FedRAMP (platform)
Microsoft Azure OpenAI Service
Yes (DPA)LightPath document processing (Azure OpenAI API)
- Region
- United States (Privion deployment in West US 2)
- Certifications
- Inherits Microsoft Azure / OpenAI enterprise commitments per Microsoft DPA
Netlify
Yes (DPA)Static hosting for priviontech.com, client portal, LightPath licensing application, and product documentation; contact form delivery on the marketing site
- Region
- Global edge
- Certifications
- SOC 2 Type II
- GDPR and CCPA program
Supabase
Yes (DPA)Client portal database and authentication; LightPath licensing server data store
- Region
- United States (Privion-managed projects)
- Certifications
- SOC 2 Type II
- ISO 27001 (platform)
Twilio SendGrid
Yes (DPA)Transactional email for general client communications and Privion client portal notifications (API/SMTP)
- Region
- United States / global delivery
- Certifications
- SOC 2 Type II (SendGrid)
- ISO 27001
- GDPR
- CCPA (Twilio platform)
Zoho
Not on filePassword management (Zoho Vault), billing, accounting, and client ticketing
- Region
- United States / global (Zoho data centers)
- Certifications
- ISO 27001
- ISO 27017
- ISO 27018
- SOC 2 Type II
- GDPR
| Subprocessor | Purpose | Region | Certifications | DPA |
|---|---|---|---|---|
| Microsoft 365 | Privion corporate productivity and collaboration | United States / global |
| Yes (DPA) |
| Microsoft Azure | LightPath and PAnalytics hosting; corporate infrastructure | West US 2 (LightPath, PAnalytics) |
| Yes (DPA) |
| Microsoft Azure OpenAI Service | LightPath document processing (Azure OpenAI API) | United States (Privion deployment in West US 2) |
| Yes (DPA) |
| Netlify | Static hosting for priviontech.com, client portal, LightPath licensing application, and product documentation; contact form delivery on the marketing site | Global edge |
| Yes (DPA) |
| Supabase | Client portal database and authentication; LightPath licensing server data store | United States (Privion-managed projects) |
| Yes (DPA) |
| Twilio SendGrid | Transactional email for general client communications and Privion client portal notifications (API/SMTP) | United States / global delivery |
| Yes (DPA) |
| Zoho | Password management (Zoho Vault), billing, accounting, and client ticketing | United States / global (Zoho data centers) |
| Not on file |
List synced from the Privion GRC Vendor Register at build time ().
Open Privion GRC