Back to Security
Security

Sub-processors

Last Updated: February 2026

This page lists the third-party service providers (sub-processors) that Vaultbrix uses to deliver our services. All sub-processors are bound by Data Processing Agreements that ensure GDPR and Swiss LPD compliance.

Swiss Data Residency

Customer database content is processed exclusively by Infomaniak in Switzerland. Other sub-processors handle only administrative data (billing, emails, monitoring) and do not access your database content.

Infomaniak

🇨🇭Switzerland
Infrastructure
Purpose: Cloud infrastructure, database hosting, backups, DNS
Data Processed: All customer data (databases, storage, functions)
Certifications:ISO 27001ISO 14001

Stripe

🇮🇪Ireland (EU)
Payments
Purpose: Payment processing, subscription management, invoicing
Data Processed: Billing information, payment methods
Certifications:PCI-DSS Level 1SOC 2

Resend

🇪🇺EU
Communications
Purpose: Transactional email delivery (verification, notifications)
Data Processed: Email addresses, email content
Certifications:SOC 2

Sentry

🇪🇺EU
Monitoring
Purpose: Error monitoring, performance tracking, debugging
Data Processed: Error logs, stack traces, performance metrics
Certifications:SOC 2GDPR compliant

Snipara

🇪🇺EU
AI Context
Purpose: AI Context Engine for schema introspection and MCP server
Data Processed: Schema metadata only (table names, columns, types) - no actual data content
Certifications:GDPR compliant

GitHub

🇺🇸USA (SCCs)
Development
Purpose: Source code hosting, CI/CD (internal use only)
Data Processed: No customer data - source code only
Certifications:SOC 2ISO 27001

Umami Cloud

🇪🇺EU
Analytics
Purpose: Privacy-focused website analytics - no cookies, no personal data
Data Processed: Anonymous page views, referrers, browser info (no IP tracking, no cookies)
Certifications:GDPR compliantCookie-free

Sub-processor Change Notifications

We will notify customers at least 30 days in advance before adding a new sub-processor that processes customer data. You may object to the addition by contacting us within the notice period.

Questions about our sub-processors or data processing?

Contact Privacy Team