Subprocessor List

1. Status of this register

This register forms part of the Privacy Policy and identifies the processors and provider categories Farvis may use. Where a provider entity or processing region depends on the selected service, customer configuration or transaction method, Farvis will disclose the applicable details before the relevant processing begins or upon a valid privacy request.

2. Japan-region cloud infrastructure provider

• Purpose: web hosting, API, database, queues and operational logs.
• Data: account information, usage data and content metadata.
• Primary processing location: Japan.
• Controls: private networking, encryption and least-privilege access.
• The applicable contracting entity is disclosed in the relevant service order, account notice or privacy response.

3. Object storage provider

• Purpose: private storage and time-limited access to uploaded and generated media.
• Data: images, video, audio and related metadata.
• Primary storage location: Japan, subject to the region identified in the applicable account or service notice.
• Controls: private buckets, expiring signed access and lifecycle deletion.
• The applicable contracting entity is disclosed in the relevant service order, account notice or privacy response.

4. HeyGen Technology Inc.

• Purpose: user-requested digital-human, avatar and voice processing.
• Data: media, scripts and provider identifiers.
• Processing locations: United States and other locations disclosed by the provider.
• Controls: overseas gateway, contract and DPA review, no-training position and deletion workflow.

5. AI generation provider

• Purpose: user-requested image, video or audio generation.
• Data: prompts, reference media and generated results.
• The active provider, contracting entity and processing locations depend on the requested capability and are disclosed before the relevant processing begins or upon a valid privacy request.
• Controls: provider contract, transfer assessment, training-policy review and deletion workflow.

6. Payment and messaging providers

• Payment processors shown at checkout process order, amount and limited payment metadata for authorisation, settlement and fraud handling.
• Messaging providers process phone numbers and message metadata for authentication or service communications.
• The applicable providers, entities and processing locations are identified at checkout, in the authentication or service interface, in an account notice, or upon a valid privacy request.

7. Updates

Farvis will update this register when a provider changes and will give advance notice where required by contract or applicable law.