Last updated:
To provide Priva6, SASU PDFShift relies on the service providers listed below. Each of them processes personal data only to provide its service to us, under a contract with data protection obligations at least as protective as ours. Transfers outside the European Economic Area are covered by an adequacy decision or the European Commission's Standard Contractual Clauses.
We inform our customers of any intended addition or replacement of a subprocessor by updating this page, and by email for significant changes, so that they can object. To be notified, write to privacy@priva6.com.
Subprocessors
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase, Inc. | Database, authentication, file storage and server functions: hosts all Priva6 data. Supabase relies on its own subprocessors, including Cloudflare for network delivery and security (see Supabase's subprocessors) | All account, document, client, signature and audit data | European Union (Ireland) |
| Postmark (ActiveCampaign, LLC) | Sending transactional emails: signing requests, reminders, notifications, signed documents and their audit trails | Recipients' names and email addresses, email content and attachments. Email content is deleted after 45 days | United States |
| PDFShift (SASU PDFShift, our own company) | Converting documents and audit trails to PDF | Document content, signatures and audit data, at the time of conversion | France / European Union |
| Scaleway SAS | Artificial intelligence (Generative APIs): plain-language explanations of document sections for signers, and summaries of the changes between two revisions | The text of the document being explained or compared, which may contain the names and details of the parties | France |
| Netlify, Inc. | Hosting the Priva6 web application (app.priva6.com, sign.priva6.com) and this website | IP addresses and technical logs of visitors | United States, with a global network |
Other third-party services
| Service | Purpose | Data | Location |
|---|---|---|---|
| Gravatar (Automattic, Inc.) | Displaying the profile pictures of team members inside the Priva6 app. Not used on signing pages | An MD5 hash of the team member's email address, and the viewer's IP address | United States |
Priva6 uses no analytics, advertising or tracking services, and fonts are self-hosted: no request is made to font providers.