Vendors and subprocessors

Last updated: 12 October 2026

Riviera uses a small number of subprocessors to operate the Service. This page lists each one, what it’s used for, and what data it may process. We’ll update this list as our vendor set changes.

Vercel

Purpose: Application hosting and deployment.

Data processed: Request/response data in transit; no persistent customer data storage.

Supabase

Purpose: Primary database — workspace, project, tool, and tool-call data.

Data processed: Workspace/project configuration, tool definitions and versions, tool-call metadata (and payloads, where a customer has opted in).

Clerk

Purpose: User authentication for signing into the Riviera product.

Data processed: Account email and authentication session data.

Anthropic (Claude)

Purpose: Model inference for Test — running tool-selection evals against a customer's interface.

Data processed: Eval case user-task text and the candidate tool definitions being evaluated.

Stripe

Purpose: Payment processing and subscription billing for the Pro plan.

Data processed: Billing email, payment method details (collected directly by Stripe), subscription and invoice records, and the Riviera workspace id.

PostHog

Purpose: Product analytics and client-side error reporting.

Data processed: Page views and interaction events with on-page text and element attributes masked; browser/device metadata; a server log of page loads (path, user agent, IP address) to tell people apart from bots and AI agents; product events (such as sign-up, project created, version published, plan changed) tied to Riviera's internal account and workspace ids, never your name or email.

Google Analytics

Purpose: Website traffic measurement on the public marketing pages only, not the signed-in product.

Data processed: Page views, approximate location, browser and device metadata and referrer. A cookie-based visitor identifier only after you accept cookies. Never your name, email or Riviera account ids.

Questions

Questions about a specific subprocessor or how data is shared with it: privacy@riviera.so.