Stripe
Stripe Payments Europe, Limited
- Purpose
- Payment processing & subscription billing
- Data categories
- billing details, payment method, transaction history
- Location
- Ireland (EU) + USA
- Last reviewed
- 2026-04-29
Back to HomeStandard Contractual Clauses Google
DPF + SCCsDPF + SCCs Standard Contractual Clauses EU/EEA — no transfer DPF + SCCs EU/EEA — no transfer
Legal
Sub-Processors
Last reviewed: April 2026
We engage the following sub-processors to deliver the Service. Each is bound by a Data Processing Agreement (Art. 28 GDPR) and, where applicable, EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.
We provide at least 30 days' notice via email before adding a new sub-processor or materially changing the role of an existing one. To object, write to privacy@vegaerp.com — we may need to terminate the affected service if a sub-processor is essential.
DPF + SCCs
Anthropic
Anthropic PBC
- Purpose
- AI features (Claude API) — bookkeeping pre-categorisation, document OCR
- Data categories
- business context data scoped to the AI task
- Location
- USA
- Last reviewed
- 2026-04-29
Google Ireland Limited
- Purpose
- OAuth authentication, Gmail integration, Maps API for travel orders
- Data categories
- auth tokens, profile info, email content (when synced), addresses
- Location
- Ireland (EU) + USA
- Last reviewed
- 2026-04-29
Microsoft
Microsoft Ireland Operations Limited
- Purpose
- OAuth authentication, Outlook email integration
- Data categories
- auth tokens, profile info, email content (when synced)
- Location
- Ireland (EU) + USA
- Last reviewed
- 2026-04-29
Resend
Resend, Inc.
- Purpose
- Transactional email delivery (notifications, magic-links, invoices) — EU region
- Data categories
- recipient email, email subject + body
- Location
- Ireland (EU)
- Last reviewed
- 2026-04-29
PostHog
PostHog, Inc.
- Purpose
- Product analytics (opt-in only, EU instance)
- Data categories
- pseudonymous usage events, page views, feature interactions
- Location
- EU (Frankfurt)
- Last reviewed
- 2026-04-29
Sentry
Functional Software, Inc.
- Purpose
- Error monitoring & performance tracing
- Data categories
- stack traces, browser/runtime context, anonymised IP
- Location
- USA
- Last reviewed
- 2026-04-29
Infrastructure host (Proxmox)
Vega Smart Labs d.o.o. (self-hosted)
- Purpose
- Application servers, Postgres database, SeaweedFS object storage
- Data categories
- all stored tenant data — encrypted at rest
- Location
- Slovenia (EU)
- Last reviewed
- 2026-04-29
Privacy policyOn request via privacy@vegaerp.com
To subscribe to sub-processor change notifications, email privacy@vegaerp.com with subject "Sub-processor notice list".