Subprocessors
Riven engages the following third-party sub-processors to deliver the platform. We update this list at least 30 days before onboarding a new sub-processor, and customers on Enterprise plans are notified by email under our DPA. Last updated 2026-08-31.
| Sub-processor | Purpose | Data | Region | Privacy notice |
|---|---|---|---|---|
| Microsoft Azure | Compute, storage, networking, Bastion access | All customer content (encrypted at rest) | US East, US West 2 | Link |
| Cloudflare, Inc. | Edge CDN, WAF, DNS, R2 asset storage | Request metadata, cached public assets | Global anycast (US POPs primary) | Link |
| Stripe, Inc. | Billing, subscriptions, PAYG metered invoicing | Customer name, billing email, payment method (Stripe-tokenized) | United States | Link |
| Riven Identity (Sovereign OIDC/SAML) | Identity, sign-in, verification codes | Email, hashed password, session tokens | United States | Link |
| OpenAI | Model inference (GPT-5.6, Whisper, gpt-image-2) | Chat prompts routed to OpenAI models (opt-in per plan) | United States | Link |
| Anthropic PBC | Model inference (Claude Opus, Fable, Sonnet, Haiku) | Chat prompts routed to Anthropic models | United States | Link |
| Google LLC (AI Studio) | Model inference (Gemini 3.5 family via AI Studio) | Chat prompts routed to Gemini models | United States | Link |
| Perplexity AI | Grounded search inference (Sonar family) | Chat prompts routed to Sonar models | United States | Link |
| Groq, Inc. | Low-latency model inference | Chat prompts routed to Groq-hosted open models | United States | Link |
| Cerebras Systems | Fast open-model inference (GPT-OSS family) | Chat prompts routed to Cerebras | United States | Link |
| Fireworks AI | Open-model inference (DeepSeek, Kimi, GLM) | Chat prompts routed to Fireworks-hosted models | United States | Link |
| OpenRouter | Model gateway for long-tail providers | Chat prompts routed via OpenRouter | United States | Link |
| Azure OpenAI Content Safety | Input/output guardrails and PII redaction | Prompt and response text (transient, not retained) | US East | Link |
| PostHog Inc. | Product analytics on marketing surfaces | Pseudonymous device ID, page events | US | Link |
| GitHub, Inc. | Source code hosting, CI, container registry | Source, build artifacts (no customer content) | United States | Link |
Questions? [email protected]