Subprocessors
The companies that help us run SavvyShield
Last updated: October 2, 2026
These service providers handle personal information for us, under contracts that limit their use of it to providing their services to SavvyShield. None of them is allowed to sell it or use it for advertising, and our AI providers aren’t allowed to train their models on it. Our Privacy Policy explains what we collect and why.
The SavvyShield Service
| Subprocessor | What it does for us | Data involved | Location |
|---|---|---|---|
| Google LLC (Google Cloud and Firebase) | Hosting, cloud functions, database (Cloud Firestore), sign-in (Firebase Authentication and Identity Platform) and logging. | All Service data. | United States (database). Scan servers in the United States, Poland and Singapore. |
| Google LLC (Gemini API) | AI analysis of links and content sent for scanning. | Scan requests: link and page addresses, link text, and what users choose to scan. | United States and other Google locations |
| OpenAI, L.L.C. | Writing training content. | Threat types and redacted details of detections and simulations. | United States |
| Anthropic, PBC | Writing simulations and simulated emails, and researching organizations and departments using public web search. | Organization and department details, administrators’ research notes, and research reports. | United States |
| Twilio Inc. (SendGrid) | Sending email: invitations, password resets, alerts, reminders, reports, simulated phishing emails and webinar invitations. | Names, email addresses and email content. | United States |
| Stripe, Inc. | Payments and billing. | Billing contact details, payment details and plan information. | United States |
| BunnyWay d.o.o. (bunny.net) | Hosting and streaming training and onboarding videos. | IP address and browser details of people watching a video. | Slovenia (EU), streamed from a worldwide network |
| Google LLC (Google Workspace) | Our team’s email, including support requests and website form notifications. | Whatever you send us. | United States |
Our website only
| Subprocessor | What it does for us | Data involved | Location |
|---|---|---|---|
| Microsoft Corporation (Microsoft Clarity) | Website analytics on savvyshield.com, loaded only with consent where the law requires it. | How visitors use the site, device and browser, approximate location, and masked session recordings. | United States |
| BunnyWay d.o.o. (bunny.net) | Streaming the videos on savvyshield.com. | IP address and browser details of visitors who play a video. | Slovenia (EU), streamed from a worldwide network |
Not on this list
- Your identity provider (for example Okta or Microsoft Entra ID). Your organization chooses it and connects it to SavvyShield for single sign-on and SCIM.
- Microsoft Outlook. The SavvyShield add-in runs inside your organization’s Outlook.
Changes
We update this page before a new subprocessor starts handling customer data. To be told about changes, or if you have questions, email privacy@savvyshield.com.
