Legal
Subprocessors
Last updated: February 12, 2026
Exova uses the third-party subprocessors below to help provide the Service. We require our subprocessors to protect information consistent with our Privacy Policy and applicable law.
Current subprocessors
The following table lists the subprocessors we engage, what they do, and the categories of data they may process on our behalf.
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Vercel | Application hosting, serverless functions, and file/blob storage | Account identifiers, request metadata, uploaded release artifacts | United States |
| Managed MySQL host | Primary application database | Account, subscription, usage, and content records | United States / EU |
| Dodo Payments | Subscription billing and payment processing | Billing contact, subscription status, payment metadata | Global (Merchant of Record) |
| OpenAI | LLM inference via the managed gateway | Prompts and context you submit for generation | United States |
| Anthropic | LLM inference via the managed gateway | Prompts and context you submit for generation | United States |
| Google (Gemini) | LLM inference via the managed gateway | Prompts and context you submit for generation | United States |
| DeepSeek | LLM inference via the managed gateway | Prompts and context you submit for generation | Global |
| xAI (Grok) | LLM inference via the managed gateway | Prompts and context you submit for generation | United States |
Changes to this list
We may update our subprocessors as the Service evolves. Material changes will be reflected here with a revised “Last updated” date. For questions, email privacy@tryexova.com.