VECTYS sub-processors
Updated on 20 October 2026.
Courtesy translation. In the event of any discrepancy, the French version of this page prevails.
This page names the service providers that process personal data for VECTYS. It supplements the VECTYS privacy policy and the data processing agreement concluded with each client. Each provider acts on VECTYS’s instructions, under a contract that complies with Article 28 of the GDPR. A copy of the transfer safeguards can be obtained at rgpd@vectys.ai.
1. Verification of transport companies, on behalf of clients
| Provider | Role | Place of processing | Safeguard for transfers |
|---|---|---|---|
| Google Cloud EMEA Limited (Ireland) | Performing the verification, authentication, technical logs, artificial intelligence models | European Union | Occasional support access from a third country: standard contractual clauses |
| Google Ireland Limited (Ireland) | Sending emails | European Union | Not applicable |
| Supabase Pte. Ltd. (Singapore) | Database and document storage | United Kingdom | Adequacy decision. Occasional support access from a third country: standard contractual clauses |
| Twilio Ireland Limited (Ireland) | Line type and carrier of the phone number | United States | EU-US Data Privacy Framework and standard contractual clauses |
| OpenSanctions Datenbanken GmbH (Germany) | Consulting sanctions lists | Germany | Not applicable |
| Apify Technologies s.r.o. (Czech Republic) | Querying the Polish register | United States | Standard contractual clauses |
| Compusib S.R.L. (Romania) | Querying the Romanian register | Romania | Not applicable |
| Openapi S.p.A. (Italy) | Querying the Italian register | Italy | Not applicable |
| IPinfo Inc. (United States) | Inferring the country from the IP address | United States | Standard contractual clauses |
| Upstash, Inc. (United States) | Limiting the number of submissions (IP address kept for fifteen minutes) | United States | EU-US Data Privacy Framework and standard contractual clauses |
2. Website, user accounts and commercial relationship, on behalf of VECTYS
| Provider | Role | Place of processing | Safeguard for transfers |
|---|---|---|---|
| Google Cloud EMEA Limited (Ireland) | Hosting of VECTYS AI, user authentication, logs | European Union | Occasional support access from a third country: standard contractual clauses |
| Google Ireland Limited (Ireland) | Sending of service emails | European Union | Not applicable |
| Supabase Pte. Ltd. (Singapore) | VECTYS AI database | United Kingdom | Adequacy decision |
| Upstash, Inc. (United States) | Protection of accounts against repeated login attempts | United States | EU-US Data Privacy Framework and standard contractual clauses |
| Vercel Inc. (United States) | Hosting of the www.vectys.ai website | United States | EU-US Data Privacy Framework |