Public list of every third-party provider that processes personal data on behalf of EvolvIA Italia in delivering the Nora service, under art. 28 GDPR (Regulation EU 2016/679).
We notify you by email at least 30 days before any addition or replacement. You have the right to object with reasons: in that case, if we cannot find an acceptable alternative, you may terminate the contract without penalty, with a refund of the unused part of the month.
This is a courtesy translation. In case of any difference, the Italian version prevails.
Some of the providers listed above (Vapi, Telnyx, Stripe, OpenRouter, Meta, ElevenLabs) are based in the United States. Transfers take place on the basis of:
EU Standard Contractual Clauses 2021/914, included in the agreements linked above
EU-US Data Privacy Framework, for certified providers (Stripe, Meta, some US entities)
Additional technical measures: encryption of data at rest and in transit, pseudonymisation
At any time you can exercise the rights guaranteed by the GDPR (arts. 15-22): access, rectification, erasure, restriction, portability, objection. To exercise them:
Export all your data: from the client dashboard, Security section, "Export my data" (you receive an archive by email)
Delete the account and all data: from the client dashboard, Security section, "Delete account" (two-step confirmation, irreversible)
For other rights write to romeo@evolvia-italia.com: we answer within 30 days
Last updated: 08/06/2026 · Version 1.0 · A living document. This public page is always the version in force.