Last updated: July 11, 2026
About this list
To operate the Vaizy platform, we engage a small number of third-party companies (subprocessors) that process personal data on our behalf. This page lists every subprocessor we use, what they do, and where they process data. This list forms part of our Data Processing Agreement (vaizy.com/dpa). Each subprocessor is bound by data protection obligations no less protective than those in our DPA.
Current subprocessors
Supabase Inc.: Database, authentication, serverless functions, and real-time. Processes account data, project records, and AI conversation inputs. Region: EU (Frankfurt). OpenAI LLC: AI assistant processing. Processes user prompts and relevant project context sent through controlled server-side gateways. Region: United States (under EU Standard Contractual Clauses). Hetzner Online GmbH: Hosting and infrastructure, via Coolify. Processes all data hosted on the platform. Region: EU (Germany). Bunny.net (Bunny.net d.o.o.): Content delivery network (CDN). Processes cached static assets and access logs. Region: EU, with global edge nodes. Mollie B.V.: Payment processing and subscription billing. Processes billing details, payment metadata, and transaction records. Region: EU. Lettermint: Transactional and product email delivery, including account and application update notifications. Processes recipient addresses and message content sent via SMTP. Region: EU. PostHog Inc.: Product analytics and error tracking. Processes usage events, access timestamps, performance data, and application error diagnostics. Region: EU. Featurebase: In-app Help Center, support requests, and What's New changelog. Processes support messages and account identifiers. Region: EU, with EU SCCs where applicable.
International data transfers
Where personal data is transferred outside the European Economic Area (EEA), we rely on Standard Contractual Clauses (SCCs) adopted by the European Commission, or adequacy decisions where applicable. We select EU-region infrastructure wherever available.
Changes to this list
We will notify customers of any intended changes to our subprocessors and provide 14 days to object before a new subprocessor begins processing personal data. To receive notifications, or to request a copy of this list, contact hello@vaizy.com.
Contact
For questions about our subprocessors, data subject requests, or compliance verification: Vaizy B.V. hello@vaizy.com vaizy.com/dpa