Pavilion AI · Legal
Provider register
The providers that actually process personal data on our behalf, their function, and the categories of data involved.
Effective date: 7 September 2026Last updated: 1 October 2026
This register lists the providers currently in use, not every tool that could be used. It is referenced by our Privacy Notice and is attached to each Order under Schedule A of our Terms. Items marked UNVERIFIED have a processing region or entity detail that is being confirmed and should not be relied on until verified.
| Provider | Function | Categories of data | Processing region | Arrangement |
|---|---|---|---|---|
| Anthropic PBC (Claude API) | AI reply drafting, lead qualification, reply-safety classifier; reads a firm’s own website once during setup | Conversation content, lead name / email / phone; the firm’s public web pages | UNVERIFIED | Pavilion subprocessor |
| Railway Corp. | Application hosting and the Postgres database (data at rest) | All personal data stored by the service | UNVERIFIED | Pavilion subprocessor |
| Vercel Inc. | Web app hosting | Minimal: app assets and request logs | UNVERIFIED | Pavilion subprocessor |
| Twilio SendGrid | All outbound email, receiving forwarded enquiries, and sender-domain authentication | Recipient email addresses, names, email content | UNVERIFIED | Pavilion subprocessor |
| Twilio Inc. | Inbound & outbound SMS / WhatsApp / voice, number provisioning, call recording & transcription | Phone numbers, message content, caller ID, voice recordings & transcripts | UNVERIFIED | Pavilion subprocessor |
| Google LLC (Calendar, Meet) | A firm’s Google diary (busy times, and bookings written into it) and Google Meet links | Appointment times, customer name and contact on the event | UNVERIFIED | Pavilion subprocessor; only when the firm connects it |
| Microsoft Corp. (Outlook, Teams) | A firm’s Outlook diary and Teams meeting links | Appointment times, customer name and contact on the event | UNVERIFIED | Pavilion subprocessor; only when the firm connects it |
| Zoom Video Communications Inc. | Video meeting links for appointments | Meeting time, topic, customer name | UNVERIFIED | Pavilion subprocessor; only when the firm connects it |
| Stripe | Appointment deposits, taken on the firm’s own connected Stripe account | Customer payment details (held by Stripe), amount, appointment reference | UNVERIFIED | The firm’s own Stripe account, connected through Pavilion |
| GoCardless Ltd | Direct Debit billing of Pavilion clients | Client billing contact (email, name, company, phone) | United Kingdom | Pavilion subprocessor |
| Meta Platforms Inc. | Messenger / Instagram messaging, Facebook lead forms | Lead form details, outbound message content | UNVERIFIED | Pavilion app; per-client Page tokens |
| Functional Software Inc. (Sentry) | Error tracking | Scrubbed error codes and ids only; no message content or contact details | UNVERIFIED | Pavilion subprocessor |
| 650 Industries Inc. (Expo push) | Push notifications to a firm’s phones running the Pavilion app | The firm’s device token, a customer’s name and the reason a person is needed | UNVERIFIED | Pavilion subprocessor |
| HighLevel Inc. (GoHighLevel) | Calendar availability & appointment booking, only for a firm still on a GoHighLevel calendar | Lead name / email / phone, appointment data | UNVERIFIED | Pavilion subprocessor; older calendars only |
| Multilead (LinkedIn automation) | Outbound LinkedIn reply delivery | LinkedIn identifier, recipient first name, message content | UNVERIFIED | Pavilion subprocessor |
Google, Microsoft, Zoom and Stripe process data only for a firm that connects them. GoHighLevel is used only by a firm still on a GoHighLevel calendar; new firms use Pavilion’s own calendar. Sentry receives scrubbed error codes and ids only, never message content or contact details. Facebook, Instagram and WhatsApp are available only where a client has completed the required Meta approvals. Also used: Slack (a firm’s own hand-over channel if it sets one, and Pavilion’s own alerts, with personal data scrubbed); Cloudflare Turnstile on the sign-up page; and Have I Been Pwned, which receives only the first five characters of a password’s hash.