About this list
To operate ValiqAI, we rely on a small number of trusted third-party companies ("subprocessors") that process data on our behalf. This page lists every subprocessor that may process personal data or customer data as part of delivering the Service.
Each subprocessor only receives the data it needs to perform its function and is bound by a data processing agreement (or equivalent contractual terms) that requires appropriate security and confidentiality safeguards. This list is referenced by our Data Processing Agreement.
Current subprocessors
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Anthropic, PBCAPI data is not used to train Anthropic models. | AI model inference: scan reasoning, analysis, and report generation | Scan target content and derived metadata sent to the model for analysis | United States |
| OpenAI, L.L.C.API data is not used to train OpenAI models. | AI vision and language analysis of scanned pages | Screenshots and page content submitted for analysis | United States |
| Railway Corp. | Cloud hosting, PostgreSQL database, and Redis job queue | All application and account data at rest | United States |
| Amazon Web Services, Inc.Or an S3-compatible provider (e.g. Cloudflare R2, Backblaze B2) where configured. | Object storage for scan artifacts and session replays | Scan screenshots, replay recordings, and generated report files | United States |
| Stripe, Inc. | Payment processing and subscription billing | Billing contact, payment method, and transaction records | United States |
| Resend (Plus Five Five, Inc.) | Transactional email delivery | Recipient email address and email content | United States |
| Functional Software, Inc. (Sentry) | Error tracking and performance monitoring | Error reports, diagnostic context, and technical logs | United States |
| MailSlurp (Pettman OÜ)Used only when a scan runs in temporary-email authentication mode. | Disposable email inboxes used during automated authentication testing | Test-inbox email content received during a scan | Estonia (EU) |
Company names link to each subprocessor's privacy or legal page, where their own data processing terms are available.
International data transfers
Most of our subprocessors are located in the United States, and some data may be transferred to and processed in the U.S. Where personal data of individuals in the EU, UK, or Switzerland is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses provided by, or entered into with, the relevant subprocessor.
Changes to this list
We keep this list up to date. We may add or remove subprocessors as our services evolve. When we add a new subprocessor that processes customer personal data, we will update this page. Customers with a signed Data Processing Agreement may request advance notice of changes as described in that agreement.
Questions
If you have questions about our subprocessors or want to request notification of changes, contact us at abhi@valiqai.com.
