Subprocessors
Effective 2026-08-13. Last updated 2026-08-13.
These are the third parties that process customer data for Vendeflect. Each entry states its purpose, the data it processes, where it is located, and whether it applies to every plan or only when a feature is enabled. We give notice before adding a new subprocessor.
1.Current subprocessors
These are the third parties that process customer data on our behalf. The list is derived from what the application actually calls, not a generic template. An entry marked as applying only to a feature or plan receives data only when that feature is enabled or that plan is in use.
| Processor | Purpose | Data processed | Location | Applies |
|---|---|---|---|---|
| Neon | Managed Postgres database | All workspace data: accounts, documents and their extracted text, questionnaires, answers, Trust Center configuration | The region of your Neon project | All plans |
| Vercel | Application hosting and content delivery | Requests in transit, request logs, IP addresses | Global edge network, with functions in the configured region | All plans |
| Amazon Web Services | AI model inference through Amazon Bedrock | The question being answered and the excerpts retrieved from your documents to answer it | The configured AWS region | Only when AI drafting is enabled. With MOCK_AI set, no data leaves the application. |
| Paddle.com Market Ltd | Merchant of record, payment processing, tax and invoicing | Billing contact details, transaction and subscription records | United Kingdom and European Union | Only for paid plans. |
2.The AI provider is optional
Amazon Web Services, through Amazon Bedrock, receives data only when AI drafting is enabled: the question being answered and the excerpts retrieved from your documents to answer it. When the deterministic offline mode is set, drafting runs inside the application and no document content is sent to a model provider.
3.Change notices
We give notice before adding a new subprocessor, so you have the chance to review it. To subscribe to change notices, email privacy@vendeflect.com with the subject line asking to be added to subprocessor updates, and we will notify you at that address before a change takes effect.
Your rights around subprocessors, including objection, are set out in our Data Processing Addendum.
Contact
- Support
- support@vendeflect.com
- Privacy requests
- privacy@vendeflect.com
- Entity
- Vendeflect