Sub-processors
Last updated May 2, 2026. Customers with an active DPA will be notified 14 days before any material change.
Last updated: June 19, 2026
VSync uses the following sub-processors to deliver its Service. This list is maintained in accordance with our Data Processing Agreement and Privacy Policy.
Customers with an active DPA will be notified at least 14 days before any material sub-processor addition or removal.
Current sub-processors
| Sub-processor | Purpose | Location | Data categories |
|---|---|---|---|
| Amazon Web Services, Inc. | Cloud hosting, storage, and database infrastructure | United States (us-east-1) | All event data, account data, uploaded documents |
| Supabase, Inc. | Authentication, PostgreSQL database, and real-time API layer | United States (hosted on AWS us-east-1) | All account data, session tokens, authentication records, legal acceptance records |
| Stripe, Inc. | Payment processing and subscription billing | United States | Billing name, billing address, payment method type, subscription status |
| Resend (Plus Five Five, Inc.) | Transactional email delivery (invitations, reminders, notifications) | United States | Name, email address, message content |
| OpenAI, L.L.C. | AI-assisted extraction of uploaded documents (COIs, run-of-show) | United States | Contents of documents submitted for processing. Inputs are not retained by OpenAI or used to train its models (zero-retention API). |
| Vercel Inc. | Application hosting, content delivery network, and edge delivery | United States (global edge) | IP address, request metadata |
| Google LLC (Google Cloud DNS, Sign in with Google) | DNS resolution and OAuth identity sign-in | United States | Name, email address, request metadata |
| Apple Inc. (APNs) | iOS push notification delivery | United States | Device push token, notification payload |
| Google LLC (Firebase Cloud Messaging) | Android push notification delivery | United States | Device push token, notification payload |
| Functional Software, Inc. (Sentry) | Crash reporting and error monitoring | United States | Stack traces, device metadata, anonymized user identifier |
| PostHog, Inc. | Product analytics | United States / European Union | Usage events, feature interactions, anonymized user identifier |
Recently removed sub-processors
- Twilio, Inc. — removed June 13, 2026. SMS delivery is not used by the Service.
- Cloudflare, Inc. — removed June 13, 2026. Content delivery and DNS are provided by Vercel and Google Cloud DNS.
(Update this section whenever a sub-processor is removed, with the processor name and removal date.)
Notification of changes
To be notified of upcoming sub-processor changes, ensure your email address on your VSync account is current. Notifications are sent to the account owner's email at least 14 days before a material change takes effect.
To object to a new sub-processor, see §6.3 of the Data Processing Agreement.
Questions about sub-processors? Contact privacy@vsync.events.