Subprocessor List
This document identifies the third parties authorized by Vekora (“Company”) to process Customer Data (Subprocessors) as defined in the Data Processing Agreement (“DPA”). This list is dynamic and may be updated periodically in accordance with the notification requirements set out in the DPA.
Infrastructure Subprocessors (Core Services)
Section titled “Infrastructure Subprocessors (Core Services)”These Subprocessors provide the essential hosting, networking, and foundational computing services required for the operation of the Platform as a Service (PaaS). They process all Customer Data stored and transmitted via the PaaS.
| Subprocessor Name | Service Provided | Location of Processing (Primary) |
|---|---|---|
| Hetzner | Cloud Hosting, Storage, Networking (DE-SN) | Germany |
| Contabo | Cloud Hosting, Storage, Networking (US-MO) | United States |
| Contabo | Cloud Hosting, Storage, Networking (SG-01) | Singapore |
Reference: The security measures implemented by these Subprocessors are detailed in the Security Policy. The specific regions for data residency are managed in accordance with the DPA.
Ancillary Service Subprocessors (Support & Operations)
Section titled “Ancillary Service Subprocessors (Support & Operations)”These Subprocessors provide services that support our platform operations, such as customer support, technical monitoring, and business management, and may process limited categories of Customer Data (e.g., contact information, service usage metrics, support ticket content).
| Subprocessor Name | Service Provided | Categories of Data Processed | Location of Processing (Primary) |
|---|---|---|---|
| Polar | Payment Processing and Billing Management | Payment information, billing details, transaction data, customer identifiers. | United States |
| Scaleway | Transactional Email Services (e.g., password resets, notifications) | User email addresses and notification content. | France |
| Zoho | Email Hosting and Email Transmission | Contact information, communication content, metadata, and any personal data included in email correspondence. | Netherlands |
Objection and Updates
Section titled “Objection and Updates”The Company maintains the right to engage new Subprocessors. Notification procedures for new Subprocessors, as well as the Customer’s rights to object to a new Subprocessor on reasonable grounds, are exclusively governed by the terms and conditions of the Data Processing Agreement.
Further Information
Section titled “Further Information”For details on the security practices, data retention periods, and specific technical and organizational measures (TOMs) related to these Subprocessors, please refer to our Security Policy and the Data Processing Agreement (DPA).