Sub-processors
Under our Data Processing Agreement, we are required to maintain a list of the third-party providers we engage to help deliver VectorPitch. This page is that list. We will give at least 30 days' notice of any material changes.
Last updated: · v1.0
| Provider | Legal entity | Purpose | Data categories | Location |
|---|---|---|---|---|
| Infrastructure & Operations | ||||
| Amazon Web Services | Amazon Data Services Ireland Limited | Hosting, storage, compute, databases, video processing, transactional email, CDN, logging and security services | Customer Content, account data, logs, emails, service metadata, support data | United States |
| Google Workspace | Google Ireland Limited | Support and business email | Email content and correspondence metadata | Global |
| Google reCAPTCHA | Google Ireland Limited | Bot and abuse protection. Used in the application where bot protection is enabled; not used on the marketing site. | Device, browser, IP address and interaction signals | Global |
| PostHog | PostHog, Inc. (2261 Market St., #4008, San Francisco, CA 94114, USA) | Marketing-site product analytics, event tracking and session recording, consent-gated | Pseudonymous usage data, device/browser metadata, page interaction events and, where recording is active, recorded on-page interactions — no Customer Content or payment data | EU — AWS eu-central-1 (Frankfurt, Germany) |
| Formspree | Formspree, Inc. | Founding Analyst application and contact form submission handling for the marketing site | Email address and any details submitted through the form, IP address and submission metadata | United States |
| Optional AI Features — only engaged when an AI feature is active on your plan | ||||
| OpenAI | OpenAI, L.L.C. | AI inference and enrichment. Customer Content is not provided for model training. | Prompts, selected video frames, video-derived descriptions, related service inputs and metadata | United States |
| Anthropic | Anthropic, PBC | AI inference and enrichment. Customer Content is not provided for model training. | Prompts, selected video frames, video-derived descriptions, related service inputs and metadata | United States |
Changes to this list. We give at least 30 days' notice before adding or replacing a
sub-processor. Customers may object on reasonable data protection grounds under the
Data Processing Agreement. How we use
these providers, and the safeguards applied to international transfers, are described in the
Privacy Notice.