Sub-processors
Last updated: February 16, 2026
Digitaltableteur Tmi (FI22264455-2), trading as VertaaUX, uses the following third-party sub-processors to deliver our services. This page is maintained in accordance with our Data Processing Agreement (Section 5).
Under our DPA, we provide at least 30 days' notice before adding or replacing a sub-processor. You may object to a new sub-processor on data protection grounds. If we cannot accommodate your objection, you may terminate your subscription without penalty.
Current Sub-processors
| Sub-processor | Purpose | Data Categories | Location | Transfer Mechanism |
|---|---|---|---|---|
| Vercel Inc. | Hosting, CDN, edge functions | All service data in transit | USA (EU regions available) | EU-US DPF + SCCs |
| Neon Tech Inc. | PostgreSQL database hosting | Account data, audit data, usage logs | USA (EU regions available) | EU-US DPF + SCCs |
| Stripe Inc. | Payment processing | Payment data, billing info, email | USA | EU-US DPF + SCCs |
| Resend Inc. | Transactional email delivery | Email addresses, notification content | USA | SCCs |
| Functional Software Inc. (Sentry) | Error tracking, performance monitoring | Error logs, IP addresses, browser info | USA | EU-US DPF + SCCs |
| Google LLC (Analytics) | Website analytics (opt-in only) | Anonymized page views, session data | USA | EU-US DPF + SCCs |
| Upstash Inc. | Redis queue, rate limiting | Job IDs, rate limit counters, queue metadata | USA (EU regions available) | SCCs |
| Browserless Inc. | Headless browser for audit execution | Audit target URLs, rendered page data (transient) | USA | SCCs |
| Mistral AI SAS | LLM-powered audit enrichment | Audit results text, issue descriptions (no PII) | France (EU) | N/A (EU processor) |
| OpenAI Inc. | LLM-powered audit enrichment | Audit results text, issue descriptions (no PII) | USA | EU-US DPF + SCCs |
Change Log
| Date | Change |
|---|---|
| February 16, 2026 | Initial publication of sub-processor list. Added Sentry, Google Analytics, Upstash, Browserless, Mistral AI, and OpenAI. Removed PostHog (no longer used). |
Notification of Changes
Sub-processor changes are communicated through the following channels:
- Updates to this page with a new date and change log entry
- Email notification to account administrators at least 30 days before the change takes effect
- Announcement in our public changelog
To receive notifications, ensure your account email is current in your account settings.
Related Documents
Contact
For questions about our sub-processors or data processing practices:
- Data Protection Officer: dpo@vertaaux.ai
- Legal: legal@vertaaux.ai