Subprocessors

1. Platform and infrastructure

These subprocessors host, secure and operate the Periva GPS platform. They may process Customer Data, including vehicle and driver telematics data.

• Amazon Web Services, Inc.AWSPrivacy noticeData processing terms
  Purpose

  Cloud hosting, compute, storage and backups for the Periva GPS platform at gps.periva.io.
  Personal data processed

  • Vehicle and device telemetry, including GPS position, speed, trip history and diagnostics
  • Driver and platform user account details
  • Client account, fleet and configuration data
  • Application, security and audit logs
  Processing location

  Canada (Montréal), region ca-central-1Entity country: United States
• Cloudflare, Inc.Privacy noticeData processing terms
  Purpose

  Authoritative DNS, content delivery, TLS termination and web application firewall for periva.io, gps.periva.io and api.periva.io.
  Personal data processed

  • IP addresses, request metadata and device or browser information
  • Any personal data contained in traffic passing through our websites and APIs
  Processing location

  Global edge networkEntity country: United States
• Google LLCGoogle Cloud PlatformPrivacy noticeData processing terms
  Purpose

  Mapping, geocoding and related Google Cloud APIs that the platform calls to place vehicles and trips on a map.
  Personal data processed

  • Vehicle coordinates and addresses submitted for lookup
  • Request metadata, including IP address
  Processing location

  United StatesEntity country: United States
• Simbase Inc.Privacy noticeData processing terms
  Purpose

  IoT SIM cards and cellular connectivity carrying telematics data from the tracking device in a vehicle to our servers.
  Personal data processed

  • SIM and device identifiers, such as ICCID, IMSI and IMEI
  • Connection metadata, including data volumes, timestamps, and the network and country a device connects from
  • The telematics payload itself while in transit
  Processing location

  United States, plus the mobile networks the SIMs connect throughEntity country: United States
• UAB "TELTONIKA IoT GROUP"FOTA WEBPrivacy noticeData processing terms
  Purpose

  Remote firmware and configuration management for the tracking devices installed in customer vehicles.
  Personal data processed

  • Device identifiers and status, including IMEI, model and firmware version
  • Vehicle identifiers, including VIN
  • Device configuration and update history
  Processing location

  European Union (Lithuania)Entity country: Lithuania
• CarsXEPrivacy notice
  Purpose

  A single lookup of vehicle reference data, such as specifications and recall information, performed manually when a vehicle is first added to a fleet. It is not a continuous or automated feed, and no location, telematics or driver data is sent.
  Personal data processed

  • Licence plate, country and region, submitted once per vehicle at onboarding
  Processing location

  United StatesEntity country: United States
• Twilio Inc.Twilio SendGridPrivacy noticeData processing terms
  Purpose

  Delivery of transactional and notification email sent by the platform and by periva.io, from our periva.io addresses.
  Personal data processed

  • Recipient name and email address
  • Email content and delivery metadata
  Processing location

  United StatesEntity country: United States

2. Business operations

These subprocessors support how we communicate with customers and deliver support. They process contact details and correspondence rather than telematics data.

• Google LLCGoogle WorkspacePrivacy noticeData processing terms
  Purpose

  Business email, calendar and document collaboration used to correspond with customers and provide support.
  Personal data processed

  • Client and prospect contact details
  • Sales and support correspondence, and any personal data included in it
  Processing location

  United StatesEntity country: United States
• Anthropic PBCClaudePrivacy noticeData processing terms
  Purpose

  An AI assistant we use to help draft replies to sales and support enquiries. Under our commercial terms, Anthropic does not use what we send it to train its models.
  Personal data processed

  • The content of an enquiry or support request we ask it to help answer, and any personal data included in it
  Processing location

  United StatesEntity country: United States
• Stripe, Inc.Privacy noticeData processing terms
  Purpose

  Card payment processing and billing. Full card numbers are entered directly into Stripe and never reach our systems.
  Personal data processed

  • Billing contact name, email address and billing address
  • Payment card details, held by Stripe rather than by us
  • Transaction history and payment status
  Processing location

  United StatesEntity country: United States

3. Website and marketing

These subprocessors only process data from visitors to periva.io. They have no access to the Periva GPS platform, to client fleet data or to telematics data.

• Vercel Inc.Privacy noticeData processing terms
  Purpose

  Hosting, serverless functions and content delivery for the periva.io website, plus Vercel Analytics and Speed Insights, which report how the site is used and how quickly it loads for real visitors. Both are first-party and set no cookies.
  Personal data processed

  • IP addresses and request metadata
  • Contact and quote form submissions while in transit
  • Pages viewed, referring site, and page load performance measurements
  Processing location

  United States, plus a global edge cache networkEntity country: United States
• Supabase, Inc.Privacy noticeData processing terms
  Purpose

  Managed PostgreSQL database storing quote requests and newsletter sign-ups submitted through periva.io.
  Personal data processed

  • Name, company name, email address and phone number
  • Fleet size, fleet location and other details provided in our forms
  Processing location

  United States (Ohio), region us-east-2Entity country: United States
• Klaviyo, Inc.Privacy noticeData processing terms
  Purpose

  Newsletter and marketing email delivery for periva.io. Subscriptions are sent to Klaviyo from our server; no Klaviyo script runs in your browser.
  Personal data processed

  • Email address and marketing preferences
  • Email engagement events, such as opens and clicks
  Processing location

  United StatesEntity country: United States

4. International data transfers

Periva Solutions Inc. is established in Vancouver, British Columbia, Canada. The Periva GPS platform and its backups are hosted in Canada, in the AWS ca-central-1 region in Montréal. Several of the other subprocessors listed above store or process personal data outside Canada, principally in the United States and the European Union.

Where personal data crosses a border, we rely on the transfer mechanisms required by applicable law together with the data protection terms in our contract with each subprocessor. Depending on the subprocessor and the data involved, these include the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and the EU–U.S. Data Privacy Framework where the subprocessor is certified under it.

We remain accountable to our customers for the personal data we entrust to a subprocessor. Each subprocessor listed here is bound by contractual obligations at least as protective of Customer Data as those in our agreement with you, each is engaged only for the purpose described in its entry above, and we remain responsible for their acts and omissions.

5. Changes to this list

We keep this page current. When we add, replace or remove a subprocessor that processes Customer Data, we update the tables above and record the change in the revision history below.

6. Revision history

1. November 3, 2026Clarified that Vercel also provides the analytics and page speed measurements for periva.io, alongside hosting. No new subprocessor was engaged and no new data left our systems, so this is a correction to the entry rather than a change requiring notice.
2. November 2, 2026Added Stripe, which processes card payments and billing contact details, and Anthropic, whose Claude assistant helps us draft replies to enquiries. Removed Meta, Google Tag Manager and Google Analytics: periva.io no longer runs any advertising or analytics tag, and we no longer send conversion events to Meta from our server. Klaviyo now only delivers newsletter email and no longer tracks on-site activity.
3. July 31, 2026First publication of the Periva subprocessor list, covering platform infrastructure, business operations, and website and marketing subprocessors.

7. Contact

Questions about this page, about a specific subprocessor, or about how we handle personal data should be directed to our legal team.

You may also want to read our Privacy Policy, Cookie Policy and Terms of Use.