Legal
Subprocessors.
Last updated 2026-10-31. These are the outside companies that process customer data on behalf of Axiology Imports, operating Integovox. Each one gets only what it needs to do its job.
Infrastructure and operations
Where Integovox runs and where backups are kept.
| Company | What it does for us | What it receives | Location |
|---|---|---|---|
| Contabo GmbH and Contabo Inc. | The virtual servers that run Integovox and hold customer databases. We administer the servers; Contabo provides the hardware and data centre. | Everything stored on the servers: customer records, files and logs. Stored on our servers, managed by us. | United States; European Union (one nonprofit customer's server) |
| Backblaze, Inc. | Off-site backup storage, including a copy locked against deletion, and storage for photos and documents uploaded in the fleet apps and dashboard. | Backups, encrypted on our servers before they are sent (Backblaze cannot read them); the photos and documents your team uploads; and security and system logs from our servers, kept 90 days in a locked copy (sent over an encrypted connection, not encrypted by us first). | United States |
| Vast.ai, and the independent operator of the server we rent through it | A rented GPU server that runs the AI models behind the Phoenix assistant, Mother and AI Mechanic: open-weight models that we run and adapt ourselves, not a third-party AI service. | The question asked and the records needed to answer it, sent over an encrypted private network. The record of the question and answer is kept on our own servers. | Norway |
| Tailscale Inc. | The encrypted private network that connects our servers. | Connection details (which server talks to which). Traffic between servers is encrypted end to end; Tailscale cannot read it. | Canada; relay servers worldwide |
| CrowdSec SAS | Blocks attacks on our servers using a shared blocklist. | The IP addresses of computers that attack our servers, and which rule they triggered. | France |
| SIA Monkey See Monkey Do (Healthchecks.io) | Uptime monitoring: alerts us when a server or a scheduled job stops reporting. | Check names and short fault summaries (server and service names, which can include a customer's company name); never customer records. | Latvia |
| Prospect One sp. z o.o. (jsDelivr) | Delivers the icon font used by the fleet web app (a public content delivery network). | Your IP address and browser details when the app page loads; no account or customer data. | Global network, operated from Poland |
| Google LLC (Google Fonts) | Delivers the web fonts used by the fleet web app. | Your IP address and browser details when the app page loads; no account or customer data. | United States |
Artificial intelligence
Most of our AI runs on open-weight models we run ourselves (see Vast.ai above). These outside AI services are used by specific features only. Under Anthropic’s commercial terms, Anthropic may not train its models on customer content sent through its API. For Google, we use the Gemini API under Google’s terms for the API service we use.
| Company | What it does for us | What it receives | Location |
|---|---|---|---|
| Anthropic, PBC | Reads photos and documents for some features: parts, labels and invoices in the fleet module; receipts and drafted thank-you, welcome and grant messages in the nonprofit module. | Only what the feature is asked to work on, when you use it: for example the photos you upload, or the donor name and gift amount a thank-you note needs. | United States |
| Google LLC (Gemini API) | Answers general questions typed into the nonprofit assistant’s “ask Gemini” window. | The question as typed, with donor names replaced and contact details masked before it is sent. | United States |
| Public web search engines (for example Google, Bing and DuckDuckGo), through our own search service | When the fleet assistant cannot answer from your data and the question is about general facts, it may search the public web. | The text of that question, which can include details you typed (for example a unit number). Search engines do not receive your records or who asked. | United States and elsewhere |
Communications
Email and our team’s alert channels.
| Company | What it does for us | What it receives | Location |
|---|---|---|---|
| Purelymail | Sends our email (sign-in links, notices) and receives mail sent to a nonprofit’s processing mailbox, for example receipts. | Email addresses and message contents. | United States |
| Slack Technologies, LLC | Alert channels for our operations team, including alerts about a customer’s fleet (for example a unit taken out of service). | Alert messages, which can name your units, work orders or staff. | United States |
Mobile apps and notifications
Used by the CVA M² mobile apps.
| Company | What it does for us | What it receives | Location |
|---|---|---|---|
| Expo (650 Industries, Inc.) | Delivers app updates to the mobile apps, and push notifications for the Supervisor app. | App version, device platform and, for notifications, a device notification token and the notification text. | United States |
| Apple Inc. | Distributes the iOS apps (App Store, TestFlight), delivers Shop Tablet notifications, and turns spoken complaints into text when voice input is used. | Notification tokens and text; for voice input, the audio is handled by Apple on the device or by Apple’s service, depending on the device settings. We receive only the text. | United States |
Older nonprofit systems
Being moved into Integovox or retired. This list shrinks as each one is switched off.
| Company | What it does for us | What it receives | Location |
|---|---|---|---|
| Airtable, Inc. | Holds a nonprofit customer’s older records. Migration to our own systems is in progress. | Donor, volunteer and finance records, until the migration is finished. | United States |
| OpenAI, L.L.C. and Pinecone Systems, Inc. | Used by an older nonprofit assistant that is being retired: search over the nonprofit’s own documents. | Questions typed into that older assistant and excerpts of the nonprofit’s documents. | United States |
Integrations you turn on
When you connect one of these from Settings, it exchanges the data you authorise with that provider under the provider’s own terms. They are not used unless you connect them: QuickBooks Online (Intuit), Xero, Square, Wise, Motive, Samsara, Geotab, Slack (dashboard notifications to your own workspace) and Google Workspace (Gmail, Calendar, Drive, Forms).
Changes
We update this page before we start using a new subprocessor. Questions: info@integovox.com. How we protect data is on the Security & Data page; how we use it is in the Privacy Policy.