Our sub-processors
To provide Veyro, we engage a limited number of sub-processors. Each is bound by a data processing agreement that requires data-protection obligations no less protective than ours, and processes personal data only on our documented instructions.
| Provider | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Supabase, Inc. | Authentication, primary application database, file storage and realtime messaging. | European Union (project region) / United States (company) | EU Standard Contractual Clauses (DPA) |
| Stripe, Inc. / Stripe Payments Europe, Ltd. | Subscription billing, payment processing and invoicing. | Ireland / United States | EU Standard Contractual Clauses + EU–US Data Privacy Framework |
| OpenAI, L.L.C. / OpenAI Ireland Ltd. | AI model inference for chatbot replies, suggested answers and embeddings. Submitted content is not used to train OpenAI models (API data). | United States / Ireland | EU Standard Contractual Clauses (DPA) |
| Google Ireland Ltd. (Gmail / Google Workspace APIs) | Connecting a customer’s Google/Gmail mailbox to sync and send support email, only when the customer authorises it via OAuth. | Ireland / United States | EU Standard Contractual Clauses + EU–US Data Privacy Framework |
| Microsoft Ireland Operations Ltd. (Outlook / Microsoft Graph) | Connecting a customer’s Outlook/Microsoft 365 mailbox to sync and send support email, only when the customer authorises it via OAuth. | Ireland / United States | EU Standard Contractual Clauses + EU–US Data Privacy Framework |
| Shopify International Ltd. | Reading order, customer and product context from a connected Shopify store, only when the merchant authorises it. | Ireland / Canada | EU Standard Contractual Clauses (Canada has an EU adequacy decision for commercial organisations) |
Changes and objections
We may add or replace sub-processors as the service evolves. We will give customers advance notice of new sub-processors so they can object on reasonable data-protection grounds, as set out in our Data Processing Agreement. To receive change notifications, contact TODO: privacy@veyro.app.
This document is provided for transparency. It is not legal advice. Please consult a qualified lawyer for your specific situation.