Overview
Veirox uses the following third-party processors to deliver the Service. Each handles a specific slice of customer data; we don't share more than the listed processor needs to fulfill its function.
Per the DPA, we'll notify Customers at least 14 days before adding or replacing a subprocessor. Material changes also surface as commits to this page in the git history.
Core subprocessors
| Provider | Role | Data shared | Region |
|---|---|---|---|
| Anthropic core privacy policy |
AI inference (Claude models) | Prompts, agent outputs, system prompts. Anthropic's zero-data-retention applies to the model API; transient cache only. | US |
| DigitalOcean core privacy policy |
Compute hosting (droplet, networking) | All persisted data — Postgres, Redis, file storage. Encrypted at rest with our keys. | EU (ams3) |
| Cloudflare core privacy policy |
DNS + DDoS protection | Traffic metadata only (IPs, request paths). No application bodies traverse Cloudflare. | Global edge |
| Stripe core privacy policy |
Billing + subscription management | Customer name, billing email, plan / subscription metadata. We never see card numbers. | US (with EU presence) |
Auxiliary subprocessors
| Provider | Role | Data shared | Region |
|---|---|---|---|
| GitHub aux privacy policy |
Source hosting + GHCR (Docker images) | Public release artifacts (CLI / agent binaries). No customer data. | US |
| Anthropic Voyage (planned) aux | Embeddings for semantic search | Hashed snippets of knowledge / runbooks for embedding generation, not raw content. | US |
| Postmark or Resend (planned) aux | Transactional email delivery | Recipient email + email body content (welcome, verify, password reset, billing notifications). | US / EU |
Optional integrations (customer-controlled)
The following are NOT subprocessors of Veirox — they are services Customers connect at their own discretion via OAuth. Data flows are between Customer and the provider; we hold encrypted access tokens to enable agent actions.
- Google Workspace (Gmail, Drive, Calendar)
- Microsoft 365 (Outlook, Teams, OneDrive, SharePoint, Planner, …)
- Slack, Telegram, WhatsApp
- Jira, Confluence
- GitHub, GitLab
- Webhook providers (AlertManager, Grafana, Datadog, Sentry, PagerDuty, Stripe, …)
Change log
- 2026-05-08 — Initial publication.
Contact
Subscribe to subprocessor change notifications: legal@veirox.com.