Subprocessors
Last updated: October 4, 2026
ShotVista uses the following third-party service providers (subprocessors) to deliver our service. Each subprocessor processes personal data on our behalf and is bound by data protection agreements compliant with the GDPR.
| Subprocessor | Purpose | Location | Data Processed |
|---|---|---|---|
| Cloud hosting and infrastructure | United States | Application data, user data, logs | |
| CDN, DNS, and security | United States (global edge) | IP addresses, request metadata, cached content | |
| Payment processing | United States | Payment information, billing details, transaction history | |
| Cloud services and AI processing | European Union | Application data, processing inputs | |
| GPU cloud computing | United States | Processing inputs and outputs | |
| Voice-over and music for video reels | United States | Reel scripts and generated audio | |
| Transactional email delivery | European Union | Email addresses, email content, delivery logs | |
| Transactional email delivery | United States | Email addresses, email content, delivery logs | |
| Error monitoring | United States | Error reports, request metadata, user identifiers | |
| Code hosting and CI/CD | United States | Source code, deployment logs |
Purpose: Cloud hosting and infrastructure
Location: United States
Data: Application data, user data, logs
Purpose: CDN, DNS, and security
Location: United States (global edge)
Data: IP addresses, request metadata, cached content
Purpose: Payment processing
Location: United States
Data: Payment information, billing details, transaction history
Purpose: Cloud services and AI processing
Location: European Union
Data: Application data, processing inputs
Purpose: Voice-over and music for video reels
Location: United States
Data: Reel scripts and generated audio
Purpose: Transactional email delivery
Location: European Union
Data: Email addresses, email content, delivery logs
Purpose: Transactional email delivery
Location: United States
Data: Email addresses, email content, delivery logs
Purpose: Error monitoring
Location: United States
Data: Error reports, request metadata, user identifiers
All subprocessors with data transfers outside the EEA have Standard Contractual Clauses (SCCs) or equivalent safeguards in place.
We will notify you of any changes to our subprocessors. If you have concerns about a subprocessor, please contact us.
Questions about our subprocessors?
Contact our Data Protection Officer at [email protected]
This list is reviewed and updated as our service providers change.