1. About this list
Covisio LLC engages a deliberately small set of third parties to operate its business and deliver its advisory services. This page lists every subprocessor that stores, processes, or transmits customer information.
Covisio notifies affected customers in advance of adding any subprocessor that will process their information, in accordance with the applicable customer agreement and Data Processing Addendum.
2. Subprocessors that process customer information
Subprocessor: Google LLC.
Entity and location: United States
- Service provided: storage, compute, database, and AI inference (Vertex AI) for the Covisio service environment; Google Cloud Platform: Transcripts (redacted), analysis output, application and audit logs; Information processed: Transcripts (redacted), analysis output, application and audit logs; Processing location: US East Region.
- Service provided: Google Workspace — email, file storage, messaging, and document production; Information processed: Deliverables, business correspondence, engagement records; Processing location: US.
3. No third-party AI provider
Covisio does not send customer information to any external AI provider or inference API. All model inference occurs inside Covisio’s own Google Cloud tenant, using either open-weight models Covisio hosts itself or Google Cloud Vertex AI. Google does not use Vertex AI customer data to train its models.
Covisio does not use customer information to train, fine-tune, or improve any general-purpose or foundation model.
4. Service providers that do not process customer information
Listed for completeness. These support Covisio’s business operations and do not receive customer information.
- Provider: GitHub, Inc. (United States); Service Provided: Source control and continuous integration; Information Processed: Covisio source code and infrastructure definitions. No customer information — customer information is prohibited in non-production environments.
- Provider: GoDaddy; Service Provided: Domain registration and DNS; Information Processed: Domain records only.
- Provider: Vercel Inc. (United States); Service Provided: Website hosting, content delivery and cookieless website analytics; Information Processed: Website content, website form submissions in transit, server logs, and aggregated page-view data.
- Provider: Resend (United States); Service Provided: Delivery of emails generated by website forms; Information Processed: Information submitted through website forms (name, business email, company, role, message) and email delivery records.
- Provider: Wave and Bill; Service Provided: Invoicing and payments; Information Processed: Customer billing contact and payment details.
- Provider: BoA; Service Provided: Business banking; Information Processed: Payment records.
- Provider: CBIZ / carrier CNA; Service Provided: Insurance; Information Processed: Business records.
5. Changes to this list
- Date: October 5, 2026; Change: Vercel Web Analytics (cookieless) enabled for the website. Does not process customer information; Notice given: Not required.
- Date: October 5, 2026; Change: Website hosting moved from Webflow to Vercel; Resend added for delivery of website form emails. Neither processes customer information; Notice given: Not required.
- Date: May 10, 2026; Change: Initial publication; Notice given: -
6. Contact us
Covisio LLC
For Privacy inquiries: privacy@covisio.com
For Security inquiries: security@covisio.comWe respond to privacy and security inquiries promptly.