Data processing providers and locations
Last reviewed: 4 October 2026.
PAVE Insight uses the providers below to run its services. The information each provider receives depends on the feature you use.
Our main application database and file storage are in Stockholm, Sweden. Website delivery, email, analytics and AI services also involve processing in other countries.
| Provider | What it does and the data involved | Storage and processing locations |
|---|---|---|
| Amazon Web Services (AWS) | Hosts our application server, database, files and backups. These hold account and contact details, application records and data supplied to our services. | Our production database, application server and reviewed file and backup storage are in Stockholm, Sweden. |
| AWS CloudFront | Delivers website content and files; handles web requests and technical information. | Global delivery network, with our reviewed file-storage origin in Stockholm. |
| AWS Simple Email Service | Sends service and business email and receives email for our CRM. Handles email addresses, messages and attachments. | Our email sending, receiving and CRM email storage are in Stockholm. Email also passes through senders' and recipients' mail systems. |
| Vercel hosting | Hosts our website, CMS, CRM and proposal application. Handles application requests, content and technical information. | The current application deployments are configured for Stockholm, Sweden. Website delivery and Vercel's wider operations can involve other countries, including the United States. |
| Vercel Web Analytics and Speed Insights | Measures website use and performance. Web Analytics is cookie-free; Speed Insights uses performance consent. | Vercel's international service infrastructure. |
| Google Analytics | Measures website use with analytics consent. Handles website interactions, online identifiers and technical information. | Google's international infrastructure, including countries where Google and its service providers maintain facilities. |
| Google reCAPTCHA | Protects forms and sign-in against abuse. Handles verification, browser and technical information. | Google's international infrastructure. |
| OpenAI | Provides AI assistance for dashboards, research and our CRM. Receives prompts and selected dashboard data, contact details and correspondence as needed for the feature. | OpenAI's international infrastructure, including processing outside the UK and EEA. Our integration uses its standard API endpoint. |
| Microsoft 365 / Exchange Online | Hosts business email and customer correspondence, including addresses, messages and attachments. Selected inbound email is routed to our CRM. | The mailbox verified in our latest review is stored in the United Kingdom. Microsoft also processes service and support data internationally. |
How this relates to your data
PAVE is responsible for personal data used for its own website, enquiries and business correspondence. When we process personal data on a customer's behalf, Schedule 1 of our service terms applies. Providers act as subprocessors in that relationship where they process that customer personal data on our behalf.
A storage location describes where the relevant records are held. It does not mean every delivery, support or processing activity takes place there. Our customer agreement sets out the terms for international transfers and subprocessor changes.
Read our Privacy Policy for information about personal data, cookies and your rights. Contact PAVE Insight for more information about providers used for your service.