Legal
Subprocessors
The types of providers that process data for Bravio, what they do and where.
Last updated: 2026-11-03
Current list
Status: 2026-11-03. Customers find the full list with every provider's name in their dashboard under Settings, and anyone affected can ask us for it by email. We announce changes by email at least 14 days in advance (Data Processing Agreement, section 6).
| Type of provider | What it does for Bravio | Where | Safeguard |
|---|---|---|---|
| Hosting and infrastructure | Website and API hosting, request logs, database, private file storage, background jobs | EU and USA | Data processing agreements; EU-US Data Privacy Framework (DPF) or Standard Contractual Clauses (SCCs) |
| Clerk Inc. (sign-in) | Sign-in and user accounts | USA | DPF, SCCs |
| Stripe (payments) | Payments, invoices, tax calculation | Ireland, USA | DPF, SCCs; own controller for fraud prevention and legal duties |
| AI text and image models | Brand profile, scripts, captions, images, video edit planning, pseudonymous usage summaries; not used for training | USA | SCCs |
| AI video and voice models | Videos from scripts, product images and Bravio's AI-generated presenters; the presenter's AI voice | USA, and outside the EU without an adequacy decision | SCCs; for one video provider none, see the note |
| Website reading and market research | Reading the public pages of the customer website; searching public ads and posts in the brand's market (search words only) | USA | SCCs (partly requested) |
| Sending Bravio's emails, receiving and storing emails you send us | EU, USA | Data processing agreements, DPF, SCCs | |
| Social publishing | Publishing to connected social accounts | Germany | Data processing agreement |
| PostHog Inc. (analytics, only with consent) | Screen recordings and click analytics | EU (Frankfurt) | Data processing agreement, SCCs |
Note on one video provider
One of our AI video providers does not publish its operator or server location and offers no data processing agreement, and the country it sends data to has no EU adequacy decision, so the protection of your data there is not equivalent to the EU. We therefore send it only scripts, product images and the AI-generated presenters from Bravio's own library, never photos of real people you upload. Screen recordings and product clips you upload are cut into your videos by Bravio itself. The provider states that it deletes uploads after 7 days and generated videos after 15 days.
Social networks
TikTok, Instagram, Facebook, YouTube and other networks you connect receive your posts as independent controllers, not as Bravio's subprocessors.