Skip to content
Clevera

Sub-processors

Last updated: 14 November 2026

Contents
  1. How we announce changes
  2. Sub-processors
  3. Independent controller
  4. Services you choose
  5. Providers for Clevera’s own data
  6. Contact

Clevera uses the sub-processors below to provide its service. A sub-processor is a third party that processes personal data on behalf of our customers: personal data in the content your team puts into Clevera, and data about the readers of your help centers. Our Data Processing Addendum (DPA) governs this processing, and this list is part of it (Annex III).

How we announce changes

At least 30 days before a new sub-processor starts processing customer personal data, or an existing one is replaced, we update this page and email the owners of every workspace.

You can object to a new sub-processor by writing to privacy@clevera.ai before the notice period ends. If we cannot resolve your objection, you may end the affected service and receive a pro-rata refund of prepaid fees, as section 6 of the DPA describes.

Sub-processors

Sub-processor Purpose Customer personal data Location
Amazon Web Services, Inc. Storage of recordings, uploads and generated media (Amazon S3); media delivery (Amazon CloudFront); server rendering (AWS Lambda); help center hosting and delivery (Amazon S3, Amazon CloudFront, AWS Lambda and Amazon SQS); service email delivery (Amazon SES) Customer content; help center content and reader data; email addresses and the content of service emails United States; EU (Sweden) for public brand assets and email; CloudFront locations worldwide for delivery
Hetzner Online GmbH Application servers and database All customer personal data held in the application database EU (Germany)
Laravel Holdings Inc. (Laravel Forge) Provisioning and management of our application servers, and daily database backups Customer personal data on the servers it manages and in database backups United States
Laravel Holdings Inc. (Laravel Nightwatch) Application monitoring and error tracking Technical logs that may include user identifiers and request details United States
Google LLC (Gemini API, Cloud Text-to-Speech) AI analysis of recordings, websites and materials; script writing, translation and narration; image generation; help center Ask AI answers and question suggestions Customer content; help center content; Ask AI questions United States
Anthropic, PBC AI models that write and direct videos and social clips, and the in-app assistant Customer content; assistant instructions United States
OpenAI, L.L.C. Speech-to-text transcription and captions; AI models, including the model that drives website research; text embeddings for help center search and Ask AI Recorded audio, narration and customer content; website pages; help center content; Ask AI questions United States
Browser Use Cloud browsers for AI website research and “Record with AI” Website addresses and pages visited; credentials you provide for a run; saved sign-in cookies United States
HeyGen AI avatar videos, presenter voices, and music and sound-effect search Narration text and audio; scripts United States
Brandfetch Fetching public brand logos Website domain names (no personal data intended) United States
Slack Technologies, LLC Internal notifications to our team, including sign-ups, failed jobs and support messages Names, email addresses, support messages and job details such as titles United States

Transfers to sub-processors outside the EEA rely on the EU–U.S. Data Privacy Framework where the provider is certified, or on standard contractual clauses, as section 7 of the DPA describes.

Independent controller

Lemon Squeezy is our Merchant of Record. It processes your purchase, issues your invoice and handles sales tax or VAT as an independent controller, under its own terms and privacy policy. It is not a sub-processor.

Services you choose

These act on your instructions and under their own terms. They are not our sub-processors:

  • ElevenLabs, when you connect your own API key
  • publishing and import integrations you connect, such as Notion, Confluence, GitHub, GitLab, Bitbucket, ClickUp, Google Docs, Help Scout, GitBook, ReadMe and WordPress
  • the video, social and storage platforms you connect to publish videos
  • your own identity provider, if you use single sign-on
  • the Clevera app for Slack, when you install it in your own Slack workspace
  • analytics you add to your own help center, such as Google Analytics, Plausible, PostHog or Segment

Providers for Clevera’s own data

We also use these providers for data that Clevera controls, such as our website, sign-in security and our free tools. They do not process customer personal data. Our Privacy Policy describes them in full.

Provider Purpose Location
Google LLC (Google Analytics 4) Analytics on our website, only with your consent, and in the Clevera app United States
Cloudflare, Inc. Network proxy and Turnstile bot checks for our website and free tools; DNS for the clevera.help domain (DNS only: help center traffic does not pass through Cloudflare) Global
ipgeolocation.io Approximate location of sign-ins for account security United States
jsDelivr Fonts for PDF downloads from the free tools Global
Have I Been Pwned (Pwned Passwords) Checking new passwords against known breached passwords. It receives only the first five characters of a password’s hash, never the password Global

Contact

Questions about our sub-processors or our DPA: privacy@clevera.ai.