Avista works with a small set of trusted service providers (“Sub-processors”) who help us deliver Avista Care and Avista Chat. Each provider is vetted for strong security practices, GDPR compliance, and data-handling standards. They only access the minimum data needed for their purpose.
Below is the full list of current Sub-processors, grouped by category.
Last Updated: 1st of December, 2025
Purpose: Cloud hosting for Avista services and dashboard infrastructure.
Data processed: Encrypted backups, logs, technical metadata.
Region: EU or US (with SCCs where needed).
Purpose: Storage of backups, documents, media, and Avista Chat files.
Data processed: Backups, uploaded documents, embeddings, system logs.
Region: EU/US.
Cloud provider
Engineering
Hosting Services
Purpose: AI model inference for generating chatbot responses.
Data processed: Chat messages, user prompts, text from uploaded content.
Note: Data is not used to train external models; processed only for your bot.
Purpose: AI model inference for generating chatbot responses.
Data processed: Chat messages, user prompts, text from uploaded content.
Note: Data is not used to train external models; processed only for your bot.
Purpose: AI Service inference for generating chatbot responses.
Data processed: Chat messages, user prompts, text from uploaded content.
Note: Data is not used to train external models; processed only for your bot.
Purpose: Stores encoded vectors of documents for semantic search.
Data processed: Embeddings (mathematical representations), not raw files.
Purpose: Converts uploaded customer documents into searchable embeddings.
Data processed: Document text and structured content during processing.
Purpose: Hosting Platform, Site monitoring, performance auditing, security scanning, uptime reports.
Data processed: Site URLs, uptime status, plugin/theme versions, security scan logs.
Region: US/EU (with GDPR-compliant safeguards).
You can create a new account at the end of the order process or on the following page. You can view all of your orders and subscriptions in your customer account. You can also change your addresses and your password.
Security
Continuous security and compliance monitoring
Purpose: DNS management, CDN performance, bot protection, and firewall security.
Data processed: IP addresses, request logs, traffic metadata.
Purpose: Complex integrations and automation of workflows between Avista services and external apps (optional per customer).
Data processed: Whatever data the customer chooses to sync (e.g., customer info, orders, financial data or inventory, support request info).
Purpose: Automation of workflows between Avista services and external apps (optional per customer).
Data processed: Whatever data the customer chooses to sync (e.g., form submissions, support request info).
Purpose: Transactional emails such as password resets, notifications, alerts.
Data processed: Email addresses, message metadata.
Product analytics
Unfortunately, we’re unable to offer free samples. As a retailer, we buy all magazines from their publishers at the regular trade price. However, you could contact the magazine’s publisher directly to ask if they can send you a free copy.
You can create a new account at the end of the order process or on the following page. You can view all of your orders and subscriptions in your customer account. You can also change your addresses and your password.
Purpose: Payment processing and subscription management.
Data processed: Billing details, transaction metadata (Avista does not store card numbers).
Purpose: Payment processing and subscription management.
Data processed: Billing details, transaction metadata (Avista does not store card numbers).
Self-hosted Project Management System
Unfortunately, we’re unable to offer free samples. As a retailer, we buy all magazines from their publishers at the regular trade price. However, you could contact the magazine’s publisher directly to ask if they can send you a free copy.
Every provider must meet standards for:
We update this list whenever new providers are added or removed, and we notify customers as required by our DPA.
If you want more detail about how we use any of these providers, or if you need a signed DPA for your records, you can contact us through our website.