Legal
Sub-processors
Last updated: May 14, 2026
Overview
To operate Riven AI we engage trusted third-party sub-processors. Each is bound by a written agreement with confidentiality and data-protection terms at least as protective as those in our Data Processing Addendum.
Current sub-processors
| Sub-processor | Category | Purpose | Region |
|---|---|---|---|
| Amazon Web Services | Infrastructure | EKS, RDS, S3, ECR, KMS | us-east-1 |
| Cloudflare | Edge / DNS | DNS, WAF, DDoS mitigation, Turnstile bot detection | Global |
| Amazon Simple Email Service | Transactional email | Account, billing, and product notification emails | us-east-1 |
| PostHog | Product analytics | Anonymous product analytics for marketing site and dashboard | [VERIFY: self-hosted vs hosted] |
| Paddle | Billing | Subscription billing, payment processing, tax handling | Global |
| GitHub | Source hosting & CI | Source code management, automated build and test workflows | Global |
Notification of changes
We will notify customers of any material change to this list at least 30 days in advance via the marketing site and, where contractually required, by email. To receive these notifications, subscribe via the footer of our home page.
Questions
Contact legal@riven.dev for clarification on any sub-processor on this list or to request additional information for procurement.