This page lists the third parties Aventro uses to provide the Service. Locations reflect verified production configuration for active services. Inactive or conditional services are identified as such and will be updated before activation. Region information for services with a verified location was last confirmed on 20 July 2026.
A. Subprocessors (process personal data on our behalf)
We engage the following subprocessors to provide the Service. Each processes personal data under data-protection terms consistent with our DPA.
Subprocessor | Purpose | Personal data processed | Region |
|---|---|---|---|
OpenAI | AI analysis, scoring, verification, and report generation | Intake data and evidence content submitted for analysis; may include personal data within documents | United States |
Supabase | Database, authentication, storage, real-time | Account data, Deal and evidence data, collaboration content, files | Frankfurt, Germany (eu-central-1) |
Vercel | Application hosting; performance/usage measurement (Analytics, Speed Insights) | Usage and device data; approximate location from IP | United States / global edge |
Render | Background compute for analysis and report generation | Evidence and intake content processed during analysis | Frankfurt, Germany |
Exa | Web-search retrieval for verification and intelligence | Search queries, which may include company and individual names | United States |
Resend | Transactional and invitation email | Recipient name and email; invitation context | United States |
PostHog | Product analytics (consent-gated) | Explicit usage events; pseudonymous account ID, role and organization | United States (US Cloud) |
Sentry | Optional error monitoring and application diagnostics (not active in production) | None while inactive | Not active; no production processing location |
Conditional (enabled only where the relevant integration/credentials are configured):
Subprocessor | Purpose | Personal data processed | Region |
|---|---|---|---|
Professional-profile verification (OAuth, where a user connects it) | Profile identity (name, headline, profile URL, email where authorized) | United States / global | |
Polar (planned) | Billing for paid plans, as merchant of record, when billing launches | Billing contact and payment details | Confirm at launch |
Note: at present, billing for business customers is handled by invoice and bank transfer; a payment processor (currently expected to be Polar) will be added to this list when online billing launches.
B. External data sources we query (verification)
These are public or third-party data sources the Service queries to verify claims. They return data (which can include personal data about founders, inventors, and executives) in response to our queries. They are not vendors processing your data on our behalf; each has its own terms.
Source | Used for |
|---|---|
USPTO | US patent verification |
EPO / Espacenet | International/PCT patent verification |
SEC EDGAR | US securities-filing verification |
OpenCorporates | Corporate registry verification |
GitHub | Engineering/team and competitor signal |
Semantic Scholar | Research/publication verification |
Y Combinator (public data) | Company/accelerator signal |
Domain / DNS / WHOIS | Website and email-domain verification |
Crunchbase (where enabled) | Company and funding signal |
Banking data aggregator (only if you connect it) | Financial verification, where offered and connected by the user |
Changes
We update this page when we add or change subprocessors. Business customers who subscribe to notifications will receive advance notice and may object on reasonable data-protection grounds, as described in the DPA.
Contact
Aventro Ltd., Yigal Yadin 1/5, Ra'anana, Israel · privacy@aventro.ai
Questions about this document? Contact us at legal@aventro.ai