sub-processor-list

Revion Solutions Incorporated (“Revion,” “Revion.com,” “we,” or “us”) engages the following subprocessors to support the provision of hosting, platform, and managed services. These subprocessors may process Customer personal data. Revion performs diligence and requires appropriate contractual protections for subprocessors.

Customers may request notification of subprocessor changes using the contact page:
https://revion.com/company/contact/

Subprocessor	Purpose	Location
Amazon Web Services, Inc.	Infrastructure hosting, backups, networking. Also the live chat on our websites, which runs in Revion’s own AWS account, and Amazon Bedrock, which provides the AI assistant that answers first	USA
Oracle Cloud Infrastructure (OCI)	Infrastructure hosting	USA
Google LLC	Hosting, analytics, performance optimization. Also reCAPTCHA v3, which checks our contact and quote forms at the moment a form is submitted	USA
Microsoft Azure	Infrastructure hosting	USA
Cloudflare, Inc.	DNS, routing, CDN, and security protections	USA
cPanel, Inc.	Hosting management and administrative platform	USA
WHMCS Ltd.	Billing and customer portal	USA
Stripe, Inc.	Payment processing	USA
enom, Inc.	Domain registration services	USA
Sectigo / RapidSSL	SSL certificate issuance	USA
Let’s Encrypt (ISRG)	Automated SSL certificate issuance	USA
Slack Technologies, LLC (a Salesforce company)	Live chat handoff: the chat transcript, the visitor’s name and email address, their telephone number and company where given, and their IP address and approximate location are posted into private Slack channels where our staff answer	USA
Cal.com, Inc.	Meeting scheduling calendar on the meeting request page	USA

This list may change as Revion evolves the Services or vendors. Changes will be reflected on this page.

Cookie	Duration	What it does, and who sets it
revion_consent	12 months	Set by revion.com. Remembers which categories you allowed here, and which version of this notice you were shown, so that we do not ask again until it changes. It holds a setting and nothing else: no visitor identifier, and nothing that follows you between visits.
__cf_bm	30 minutes	Set by Cloudflare, inside the Cal.com booking calendar, on the cal.com domain. Tells automated traffic apart from real visitors so that the calendar stays available to people. It reads how the request was made, not who made it. Measured at 29 to 30 minutes.
__Secure-next-auth.callback-url	Until you close your browser	Set by Cal.com, on the cal.com domain. Part of the sign-in machinery of Cal.com's own application, which the calendar page is built on. You are not signing in to anything, and it holds no account of yours. It is deleted when you close your browser.
__Secure-next-auth.csrf-token	Until you close your browser	Set by Cal.com, on the cal.com domain. A one-visit token that lets Cal.com tell a form you submitted apart from one another site submitted on your behalf. It is deleted when you close your browser.
uid	Until you close your browser	Set by Cal.com, on the app.cal.com domain, and only once you pick a time slot: opening the page does not write it. It holds the slot Cal.com has put on hold for you while you fill the booking form in, so that two people cannot be given the same time. It is deleted when you close your browser.

Cookie	Duration	What it does, and who sets it
_ga	400 days	Set by Google Analytics, on the revion.com domain. Tells one visitor apart from another so that visits can be counted without identifying anyone. Two page views from the same browser count as one visitor rather than two. Written only after you allow this category.
_ga_T94F03YGES	400 days	Set by Google Analytics, on the revion.com domain. Keeps track of the visit you are in the middle of, for our own measurement property: the letters on the end are that property, and no other site shares it. Written only after you allow this category.

We value your privacy