Subprocessors
Because Knovara runs inside your own cloud account, most processing happens under contracts you already hold — not ours. The parties that do process data are listed below, separated into the two cases so it is clear who governs each one.
Last updated September 2026
Processing in your own cloud account
These process your data under your own agreements with those providers, inside the account and region you control. They are not FirmsNest subprocessors; we list them for completeness.
| Provider | Role |
|---|---|
| Amazon Web Services or Microsoft Azure | Compute, private database and networking for your Knovara deployment, in your account. |
| Amazon Bedrock or Azure OpenAI | The Claude model service, in your account. Prompts and document text are processed here to generate an answer, under your provider terms; customer content is not used to train the models. |
| Microsoft 365 (SharePoint, Teams, Entra ID) | Your own tenant — the source of documents, identity and the Teams client. |
| Microsoft — Azure Bot Service | Transport for Teams messages (the Bot Framework channel). The bot resource is registered in your own Azure subscription, under your Microsoft agreement. |
FirmsNest subprocessors
These we engage directly. This is the list your DPA covers; we will notify customers of material changes before they take effect.
| Subprocessor | Purpose | Data |
|---|---|---|
| Resend | Outbound email: budget-threshold alerts to the recipients you configure, and replies to messages you send us. | Recipient addresses and message bodies that carry amounts and percentages only — never document content. |
| Vercel | Hosting for the knovara.app website. | Standard website server logs only. No product or customer data. |
FirmsNest personnel operate your deployment on your behalf and have access only as needed to run and support it (metadata by default; content only under a time-limited, audited support grant you approve). That operational access is covered in the architecture and DPA, not a subprocessor relationship.
The signed DPA and its subprocessor terms are available on request from the trust center.