Legal
Sub-processors
The service providers that process personal data on Corvin's behalf: who they are, what they do, where they are, and the safeguards in place.
Last updated 21 August 2026
Current sub-processors
These providers process personal data on our behalf and on our instructions:
- Cloudflare, Inc. — website hosting and CDN, server logs, the Turnstile check on the contact form, and storage of submitted enquiries. Location: United States and a global edge network. Safeguard: EU–US Data Privacy Framework and Standard Contractual Clauses.
- Amazon Web Services, Inc. — delivery of the notification email when you submit the contact form. Location: European Union (Frankfurt) with United States parent. Safeguard: EU–US Data Privacy Framework and Standard Contractual Clauses.
- CookieYes Limited — the consent banner, and the record of the consent choice you made. Location: United Kingdom. Safeguard: UK adequacy decision.
- Google LLC — Google Analytics 4 usage statistics, and only if you have consented. Location: United States and EU data centres. Safeguard: EU–US Data Privacy Framework and Standard Contractual Clauses.
Not used on this website
Typefaces, images and scripts are served from our own domain: this website loads nothing from a third-party content network. Google is contacted only after you consent to analytics, not before, so declining means your visit is never disclosed to Google at all.
One exception, stated plainly: the consent banner itself is served by CookieYes and loads on every page before you have made a choice. A consent tool has to run before consent exists in order to ask the question. It is used for that purpose only, and it is listed above as a processor.
Updates
We update this list whenever a provider is added or removed. If you would like to be told when it changes, write to us and we will let you know.
This page is written in English, which is the controlling version. If you have a question about anything here, write to hello@corvinhub.com.