Legal
Last updated: April 28, 2026
About this list
A company we use to process data that belongs to our customers — the cloud provider that runs our servers, or the AI model that returns answers to your queries. We hold each one to data protection obligations substantially the same as those we offer customers.
This page is the live, public list of those companies. It is the source of truth referenced in our Data Trust commitments and in any executed Data Processing Agreement. We update it before changes go into effect, and we notify customers when we do.
The list
Three trusted partners power NavJun. If a subprocessor is not listed here, NavJun does not share customer data with them.
France
Language model and OCR provider for query processing. Per Mistral’s data handling policies, customer data is not used to train Mistral’s models.
Customer data accessed
Query content (in volatile memory, not persisted)
United States
Application hosting and infrastructure.
Customer data accessed
Account data; operational telemetry. No customer query content.
United States
Payment processing.
Customer data accessed
Billing contact information; payment method tokens. No customer query content.
Process
When we add or replace a subprocessor that processes personal data, we follow three steps.
Notify customers by email at least 30 days before the change takes effect, sent to the billing or privacy contact on the customer’s account.
Update this page with the new entry, the date the change takes effect, and a note in the change log below.
Hold open a 30-day objection window, during which a customer may object on reasonable, data-protection-related grounds.
In a security or continuity emergency, we may engage a replacement on shorter notice. We notify customers as soon as reasonably practicable, and the same right of objection applies.
Subscribe to be notified when we add or replace a subprocessor.
Disagree?
If you are a NavJun customer and you object to a new subprocessor on data-protection-related grounds, email legal@navjun.com within the 30-day notice window. We will work with you to find a resolution. If we cannot agree within 30 days, you may terminate the affected portion of your underlying agreement and receive a pro-rated refund of any prepaid, unused fees.
Related
History
Every change to the subprocessor list, oldest first. Entries do not expire.
| Date | Change | Notes |
|---|---|---|
| 2026-04-28 | Initial publication New | Three subprocessors listed: Mistral AI SAS, Railway Corporation, Stripe, Inc. |
Reach us
Three inboxes for the most common questions about this list.
Privacy / DPA matters
privacy@navjun.comSecurity incidents
security@navjun.comSubprocessor objections
legal@navjun.comNavJun Solutions Ltd. is a Canadian company headquartered in Vancouver, British Columbia.
