Sub-processors
This page lists the sub-processors AvdControl uses to deliver the hosted service, as required by the Data Processing Addendum. Each is engaged under a written contract that limits it to our instructions, imposes confidentiality, requires appropriate security measures, and includes transfer safeguards where relevant.
The hosted service currently runs in United Kingdom (London).
1. Current sub-processors
| Sub-processor | What it does for us | Data involved | Primary location |
|---|---|---|---|
| Fly.io (Fly.io, Inc.) | Application hosting and compute for the console, and the volume holding support attachments | All customer data passing through or stored by the application | London, United Kingdom (vendor is US-headquartered) |
| Managed PostgreSQL provider | The primary application database | Accounts, tenant configuration, encrypted secrets, session records, audit records, support threads | United Kingdom |
| Stripe (Stripe, Inc. and its group companies) | Subscription billing, checkout, invoicing and payment processing | Billing contact details, plan and subscription data, payment records. Stripe is a controller for payment data it collects directly | United States and Ireland |
| Resend (Resend, Inc.) | Sending transactional email such as invitations, temporary passwords, credential expiry and billing notices | Recipient name and email address, and the content of the message | United States |
| Google (Google Ireland Limited) | Google Analytics 4 measurement on the public marketing website only, and only after cookie consent | Website usage events, IP address, device and browser data. Never loaded on tenant or operator consoles | European Union and United States |
| Microsoft (Microsoft Corporation and its group companies) | Your own Azure and Microsoft Entra ID tenant, which the service reads and acts on using the access you grant | Azure Virtual Desktop inventory and session data, and identity data where you enable single sign-on or SCIM | Determined by you, in your own Azure tenant |
2. Changes and objections
We may add or replace a sub-processor as the service evolves — for example when we add a hosting region. Where that happens we will update this page before or at the time the change takes effect, and customers who have asked for change notices will be emailed at least 30 days beforehand where the change is planned, or as soon as practical where it is needed urgently for security or continuity.
To subscribe to change notices, or to raise a reasonable, documented objection to a new sub-processor on data protection grounds, email [email protected]. We will work with you to find a solution; if we cannot, you may terminate the affected subscription and receive a refund of prepaid fees for the unused period, as set out in the Data Processing Addendum.
3. Our own personnel
A limited number of AvdControl operators can access tenant data where necessary to run and support the service. They are bound by confidentiality obligations, must use multi-factor authentication, and their privileged actions inside a tenant are recorded in that tenant's audit trail.