This page lists third-party subprocessors Remote Reviewer engages to deliver the platform. We review and update this list when providers or processing purposes change. If you have questions about a specific subprocessor, contact us at info@remotereviewer.com.au.
| Provider | Purpose | Typical Data Categories | Processing Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure, application hosting, and media/object storage | User account data, uploaded files (video/audio), assessment metadata, logs | Australia (ap-southeast-2); backup regions may apply |
| Stripe | Subscription billing, payment processing, and invoicing | Billing contacts, subscription metadata, payment method metadata (card type / last four digits only) | United States |
| OpenAI | AI-powered features: audio transcription (Whisper), checklist generation, and AI-assisted evidence review — when enabled by the Account Owner | Audio recordings submitted for transcription; text prompts and checklist content | United States |
| Learning Locker (learningrecordstore.com.au) | Optional free-tier Learning Record Store (LRS) for xAPI statement forwarding — provisioned only if an Account Owner opts in to create one; not used by default and not involved unless explicitly requested | xAPI statements (assessment activity records, actor identifiers, verbs, results) | Australian-domain provider (.com.au); contact us to confirm current hosting location |
| Veracity (lrs.io) | Optional Learning Record Store (LRS) for xAPI statement forwarding — provisioned only if an Account Owner opts in to create one; not used by default and not involved unless explicitly requested | xAPI statements (assessment activity records, actor identifiers, verbs, results) | Provided by Veracity; contact us for current processing location details |
| Zoho (CRM / ZeptoMail) | Transactional email delivery and CRM contact sync | Name, email address, communication preferences | United States / India |
| Google (Analytics / reCAPTCHA) | Analytics (with consent only) and abuse prevention on sign-in pages | Device/browser telemetry, IP-derived metadata, event data | United States |
Where personal data is processed outside your jurisdiction, Remote Reviewer applies appropriate contractual and technical safeguards, including Standard Contractual Clauses for transfers from the EEA or UK, and measures consistent with APP 8 for Australian data. OpenAI and Stripe process data in the United States under their respective data processing agreements, which include contractual protections.
OpenAI processes data strictly via API call. OpenAI does not use API data to train or improve its models by default, and we have not enabled OpenAI's optional data-sharing setting that would permit this. AI features are optional and controlled by Account Owners. See our Privacy Policy for details.
For subprocessor or data processing questions, contact info@remotereviewer.com.au.