Subprocessor Disclosure
Subprocessor Disclosure
Company: RavDev Technologies, LLC Effective Date: March 1, 2025 Last Updated: April 4, 2026 Contact: legal@ravdevtech.comThis policy is provided for informational purposes. Consult legal counsel for jurisdiction-specific compliance.
1. What Is a Subprocessor?
A subprocessor is a third-party organization that RavDev Technologies, LLC engages to process customer data on our behalf in connection with delivering NextGen Grant OS. We only engage subprocessors that provide sufficient guarantees around data protection and security.
2. Current Subprocessors
The table below lists our current subprocessors. The live, current list is also available dynamically on this page.
| Vendor | Service Type | Purpose | Data Categories | Region |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Cloud Infrastructure | Hosts the NextGen Grant OS application, database, cache, file storage, CDN, and networking (EKS, RDS, ElastiCache, S3, CloudFront, WAF, Route53) | All customer data, Account data, Usage logs | United States |
| OpenAI, LLC | AI Model Inference | Powers AI-assisted grant writing, discovery, analysis, chat, and semantic embeddings (GPT-4o, GPT-4o-mini, text-embedding-3-small) | Grant content, Document text, Chat messages | United States |
| Anthropic, PBC | AI Model Inference | Fallback AI model for grant writing and analysis tasks (Claude) | Grant content, Document text | United States |
| Microsoft Azure | AI Model Inference (Optional) | Azure-hosted OpenAI models for organizations requiring Azure data residency | Grant content, Document text | Configurable |
| Stripe, Inc. | Payment Processing | Processes subscription payments and manages billing lifecycle | Billing information (name, email, payment method token) | United States |
| Sentry, Inc. | Error Monitoring & Crash Reporting | Captures application errors, performance traces, and alerts for reliability | Error context, Stack traces (no Customer Data content) | United States |
3. Notification of Changes
RavDev Technologies will notify customers of any addition or replacement of subprocessors with at least 30 days advance notice, unless emergency circumstances require shorter notice. Notification will be provided by:
- Email to the primary account holder
- Notice posted in this page and in the Service
If you have a Data Processing Addendum (DPA) with RavDev Technologies that grants you the right to object to new subprocessors, you may exercise that right within 15 days of receiving notification.
4. Data Processing Agreements
We have executed Data Processing Agreements (DPAs) or equivalent contractual arrangements with each subprocessor that:
- Restrict subprocessors to processing customer data only for the purposes we specify
- Require subprocessors to implement appropriate technical and organizational security measures
- Prohibit subprocessors from sharing customer data with additional sub-subprocessors without authorization
- Require subprocessors to delete or return customer data upon termination
5. International Transfers
Some subprocessors process data in the United States. For transfers of personal data from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission or other lawful transfer mechanisms.
6. Questions or Objections
For questions about subprocessors or to exercise any rights under a DPA:
RavDev Technologies, LLCEmail: legal@ravdevtech.com Subject: "Subprocessor Inquiry"
Current Subprocessors
| Vendor | Service Type | Purpose | Region |
|---|---|---|---|
| Anthropic, PBC | AI Model Inference | Fallback AI model for certain grant writing and analysis tasks | United States |
| OpenAI, LLC | AI Model Inference | Powers AI-assisted grant writing, discovery, analysis, and chat features | United States |
| PostgreSQL (Cloud Provider) | Database | Primary relational database for all application data | United States |
| Replit | Application Hosting & Infrastructure | Hosts the NextGen Grant OS application and development environment | United States |
| Stripe, Inc. | Payment Processing | Processes subscription payments and manages billing | United States |
| iron-session | Session Management | Secure encrypted session management for authenticated users | United States (library, no data transmitted) |