Subprocessors
Last updated: July 2026
This page lists the third-party subprocessors that vaultsuite.dev uses to provide the service. We carefully select subprocessors that respect privacy and comply with GDPR.
All customer data is end-to-end encrypted. Subprocessors store only encrypted ciphertext (which they cannot decrypt) or minimal metadata necessary to operate the service.
Current subprocessors
| Subprocessor | Purpose | Data shared | Location | Privacy policy |
|---|---|---|---|---|
| Fly.io | Compute infrastructure (customer instances, edge proxy, control plane) | Encrypted instance data, metadata (instance status, resource usage) | EU (Amsterdam) | View |
| Neon | Postgres database (control plane: accounts, billing, instance metadata) | Account metadata, billing records, instance configuration | EU | View |
| Stripe | Payment processing (credit/debit cards) | Billing information, email address | EU / US (with SCCs) | View |
| Cloudflare | DNS management | DNS records (domain names, IP addresses) | Global (EU available) | View |
| Resend | Transactional email (receipts, notifications) | Email address, email content | US (with SCCs) | View |
Changes to this list
We will notify customers (via email or dashboard notice) at least 30 days before adding a new subprocessor. If you object to the new subprocessor, you may terminate your account within that period.
Data Processing Agreement
For B2B customers, we provide a Data Processing Agreement (DPA) that contractually binds us and our subprocessors to GDPR requirements.
Contact
For questions about our subprocessors, contact us at privacy@vaultsuite.dev.