Subprocessors

Subprocessor	Status	Location	URL	Service Description
Amazon Web Services	Active	US, EU, GovCloud	https://aws.amazon.com/compliance/gdpr-center/	Cloud computing, hosting services (Required).
Google	Active	US	https://cloud.google.com/security/gdpr/	Language translation services (Optional-Dependent on customer requirements.)
Twilio	Active	US	https://www.twilio.com/gdpr	Text messaging services (Optional-Dependent on customer requirements.)
SerpAPI	Active	US	https://serpapi.com/	An API used for an optional RITA feature named Live Results, which processes customer intents across the web to determine if a suitable response may be found. (Optional-Dependent on customer requirements.)
Azure Open AI LLM	Active	US, EU	https://azure.microsoft.com/en-us/solutions/ai	An AI, Large Language Model (LLM) that will be provided customer intents and results from SerpAPI to further refine responses to customer intents. (Optional-Dependent on customer requirements.)
Elastic	Active	US, EU	https://www.elastic.co/gdpr	A SaaS vector search database which enables search capabilities in RITA.
Apify	Active	EU	https://apify.com/gdpr	A cloud platform for web scraping, browser automation, and data for AI. (Optional-Dependent on customer requirements.)
Anthropic	Active	US	https://support.anthropic.com/en/collections/4078534-privacy-legal	An AI, Large Language Model (LLM) that will be provided customer intents and results from SerpAPI to further refine responses to customer intents. (Optional-Dependent on customer requirements.)
Tavily	New	US	https://tavily.com/	An API used for an optional RITA feature named Live Results, which processes customer intents across the web to determine if a suitable response may be found. (Optional-Dependent on customer requirements.)
OpenAI	New	US, EU	https://openai.com/security-and-privacy/	An AI, Large Language Model (LLM) that will be provided customer intents and results from SerpAPI to further refine responses to customer intents. (Optional-Dependent on customer requirements.)

Status Definitions

Active: A subprocesser Resolve currently utilizes
New: A subprocessor Resolve does not yet use, however may use within 30 days of the customer notification date
Deprecating: A subprocessor which Resolve is considering retiring for a new subprocessor or because it is no longer needed

*Resolve Services are available in the customer's choice of regions. The available regions are US, EU, and GovCloud.

Resolve Personal Data Transfers

Personal data submitted to Resolve services may be accessed, processed or stored internationally by Resolve or Resolve third parties for the purpose of providing the service as described in the privacy policy.

Resolve is a US-based company with international employees.

Resolve service providers and their location are listed in the subprocessor section above.

The region where data is primarily stored is the customer’s choice. Service region offerings currently include the United States, European Union, GovCloud, and Canada.

Resolve implements reasonable safeguards for all data transfers, regardless of region. For international transfers to the European Economic Area (EEA), the UK, or Switzerland, Resolve complies with U.S. Data Privacy Framework (DPF) requirements. As a result, Resolve is included in the EU Commission’s Adequacy Decision. The EU Commission’s Adequacy Decision is an approved standard that includes contractual data protection clauses for transfers to the EEA and Switzerland and the UK approved international data transfer agreement/addendum for transfers to the UK.