Evoto Third-Party Service Providers and Sub-processors

Last Updated: March 27, 2026

Overview

This page supplements Evoto's Privacy Policy and, where applicable, Evoto Global Data Processing Agreement ("DPA"). It identifies certain third-party service providers, third-party recipients, and Sub-processors engaged in connection with Evoto's Services.

For purposes of this page, "Third-Party Service Providers" is a broader transparency term used in Evoto's public privacy disclosures. "Sub-processors" is a narrower term used in the DPA and refers only to third parties engaged by or on behalf of Evoto to Process Customer Personal Data on behalf of business customers. Not every Third-Party Service Provider is a Sub-processor, and a provider's role may vary depending on the relevant Service, data flow, and customer use case.

Where a provider processes personal information on Evoto's behalf, Evoto requires the provider to act in accordance with Evoto's written instructions and to implement appropriate confidentiality, security, and data protection measures. Where appropriate, Evoto enters into data processing agreements or other compliance documentation with such providers.

As described in Evoto's Privacy Policy, where a provider processes Your Content on Evoto's behalf for service delivery, that provider is contractually restricted from using Your Content to train its own AI models or for independent commercial purposes. This page forms part of Evoto's Privacy Policy and should be read together with it. For customers for whom Evoto acts as a processor, service provider, or similar intermediary, this page should also be read together with the DPA and any applicable SCCs or similar transfer mechanism.

Evoto may update this page from time to time to reflect material changes in its use of Third-Party Service Providers or Sub-processors. Where required by applicable law or contract, Evoto will provide notice of changes to Sub-processors in accordance with the DPA and any applicable transfer mechanism.

This page provides the following information:

Named Third-Party Service Providers and named Sub-processors disclosed in connection with Evoto's Services
Additional Third-Party Service Provider and Sub-processor categories described in Evoto's public privacy disclosures and DPA framework

1. Named Third-Party Service Providers and Named Sub-processors

The providers listed below are specifically identified in Evoto's current public privacy disclosures together with the functions they support and the roles they typically play under Evoto's Privacy Policy and DPA frameworks.

For each named provider listed below, we provide the following information:

Provider. We identify the relevant third-party service provider, third-party recipient, or Sub-processor, as applicable.
Service/Processing Function. We identify the relevant service, feature, or processing activity supported by the provider.
Privacy Policy Role and DPA Role. We identify how the provider is disclosed in Evoto's public privacy disclosures and whether the provider is named as a Sub-processor for Customer Personal Data in the relevant service context under Evoto's DPA framework. Providers identified as "Not typically a Sub-processor" are disclosed for transparency under Evoto's Privacy Policy and related notices.
Location. We indicate the primary country or region from which the provider provides or delivers the applicable service. This may include the provider's headquarters location and/or a key processing hub for the relevant service. Other processing locations may apply and may be identified in the provider's own documentation.
Description/Notes. We describe how Evoto uses the provider in connection with the applicable service.

Provider	Service/Processing Function	Privacy Policy Role	DPA Role	Location	Description/Notes
Amazon Web Services, Inc.	Cloud-based features, including cloud sync, project storage, online editing, content processing, transmission, caching, storage, and related functionality	Third-Party Service Provider	Sub-processor	US	AWS provides infrastructure and cloud-related services that support Evoto's cloud-based and server-side functionality. Where AWS Processes Customer Personal Data on behalf of business customers, it may act as a Sub-processor.
Infobip d.o.o.	Registration, login, verification, and security services	Third-Party Service Provider	Sub-processor	CR	Infobip supports identity verification and related messaging-based verification services. Where those services involve Customer Personal Data processed on behalf of business customers, Infobip acts as a Sub-processor.
Google LLC	Analytics and marketing effectiveness measurement	Marketing / Analytics Partner	Not typically a Sub-processor	US	Google may support analytics, measurement, and related service improvement functions. In this context, Google is generally disclosed for privacy transparency rather than as a DPA Sub-processor.
Google LLC	Account registration and login	Third-Party Recipient	Not typically a Sub-processor	US	Google may support user registration and sign-in when a user chooses to use a Google account. In this context, Google is generally disclosed for privacy transparency rather than as a DPA Sub-processor.
LY Corporation	Account registration and login	Third-Party Recipient	Not typically a Sub-processor	JP	LY may support user registration and sign-in when a user chooses to use a Line account. In this context, LY is generally disclosed for privacy transparency rather than as a DPA Sub-processor.
Kakao Corp.	Account registration and login	Third-Party Recipient	Not typically a Sub-processor	KR	Kakao may support user registration and sign-in when a user chooses to use a Kakao account. In this context, Kakao is generally disclosed for privacy transparency rather than as a DPA Sub-processor.
Meta Platforms, Inc.	Account registration and login	Third-Party Recipient	Not typically a Sub-processor	US	Meta may support user registration and sign-in when a user chooses to use a Facebook account. In this context, Meta is generally disclosed for privacy transparency rather than as a DPA Sub-processor.
Meta Platforms, Inc.	Advertising attribution, conversion analytics, and campaign optimization	Marketing / Analytics Partner	Not typically a Sub-processor	US	Meta may support ad attribution, conversion analytics, and campaign optimization, subject to applicable law.
TikTok	Advertising attribution, conversion analytics, and campaign optimization	Marketing / Analytics Partner	Not typically a Sub-processor	US	TikTok may support ad attribution, conversion analytics, and campaign optimization, subject to applicable law.
Awin, Inc.	Affiliate marketing, attribution, and campaign performance measurement	Marketing / Analytics Partner	Not typically a Sub-processor	US	Awin（ShareASale） may support affiliate marketing, attribution, and related campaign performance functions.

2. Additional Third-Party Service Provider and Sub-processor Categories

The categories below reflect additional types of Third-Party Service Providers described in Evoto's Privacy Policy and related public privacy disclosures. Where relevant to Customer Personal Data processed under the DPA, a category may also include providers acting as Sub-processors.

This category list is supplemental. The named providers in Section 1 are the operative named list for transparency and, where marked as such in the "DPA Role" column, for DPA Sub-processor identification.

Category	Typical Services	Privacy Policy Role	DPA Role	Description / Notes
Payment Service Providers	Checkout, subscriptions, billing, refunds, invoices, and payment processing	Third-Party Service Provider	Sub-processor or depends on service context	Third-party providers used to process transactions, subscriptions, refunds, invoices, and related payment functions. Full payment card numbers and security codes are generally processed directly by such providers and are not stored by Evoto.
App Stores	App distribution, purchases, subscriptions, and order confirmation	Third-Party Recipient	Not typically a Sub-processor	Third-party app stores that support app distribution, purchases, subscriptions, and transaction-related communications.
Resellers and Order Management Providers	Subscription fulfillment, reseller transactions, and order administration	Third-Party Service Provider	Sub-processor or depends on service context	Third parties used to support transaction confirmation, subscription fulfillment, and related order administration.
Communications and Email Providers	Service notices, order notices, security alerts, newsletters, product updates, and marketing communications	Third-Party Service Provider	Sub-processor or depends on service context	Third-party providers used to send transactional, service-related, and marketing-related communications where permitted by law.
SMS and Messaging Providers	Verification, security alerts, and account communications	Third-Party Service Provider	Sub-processor or depends on service context	Third-party providers used for account verification, security workflows, and related user messaging.
Third-Party Login or Social Media Platforms	Account registration and login	Third-Party Recipient	Not typically a Sub-processor	Third-party providers that support registration or sign-in when a user chooses to use an external account.
Advertising, Measurement, and Marketing Partners	Advertising, attribution, campaign performance, and related marketing activities	Marketing / Analytics Partner	Not typically a Sub-processor	Third-party partners used to support ad attribution, campaign effectiveness measurement, conversion analytics, and optimization.
Customer Support and Ticketing System Providers	Customer support, support requests, appeals, dispute handling, and technical assistance	Third-Party Service Provider	Sub-processor or depends on service context	Third-party providers used to manage and respond to support requests and related communications.
Security Providers	Account protection, security monitoring, and incident response	Third-Party Service Provider	Sub-processor or depends on service context	Third-party providers used to support service and account security.
Anti-Fraud Providers	Fraud prevention, anti-abuse, and risk mitigation	Third-Party Service Provider	Sub-processor or depends on service context	Third-party providers used to help prevent fraud, abuse, and unauthorized access.
Development and Operations Support Providers	Maintenance, diagnostics, debugging, and service operation	Third-Party Service Provider	Sub-processor or depends on service context	Third-party providers used to support maintenance, diagnostics, debugging, and operational reliability.
Professional Advisers	Legal, compliance, audit, and related professional support	Third-Party Recipient	Not typically a Sub-processor	Third-party advisers engaged where necessary for lawful operations, compliance, or dispute resolution.
AI service providers	Model inference, generation, classification, enhancement	Third-Party Service Provider	Sub-processor	Providers used to support AI-powered product features and related processing activities on our behalf.