Last Updated: April 16, 2026
2. Current Sub-Processors
| Entity Name | Product or Service | Location of Processing | Purpose of Processing |
|---|---|---|---|
| Cloudflare | All Services | Processing is performed at the data center closest to the End User | Edge CDN and DDoS protection |
| Google Cloud Platform | All Services | United States, Europe | Cloud infrastructure and computing services |
| Vercel | All Services | United States, Europe | Website hosting and deployment |
| Meta Platforms | All Services | Ireland, United States | WhatsApp Business platform integration |
| Stripe | All Services | United States, Europe | Payment processing and subscription billing |
| Sentry | All Services | United States | Application error monitoring |
| GitHub | Internal Services | United States | Source code repository and version control |
| Google Workspace | Internal Services | United States, Europe | Business productivity and collaboration |
Sub-processor engagements are reviewed periodically. Controllers are notified of any intended addition or replacement as described in Section 3 below.
3. Notification of Changes
We provide written notice to Controllers at least 30 days before engaging a new sub-processor or replacing an existing one for the processing of Controller Personal Data. During the notice period, Controllers may object on reasonable data-protection grounds as described in our DPA; if no alternative is available, the Controller may terminate the affected services.
To receive notifications of sub-processor changes, subscribe by sending an email to legal@vorden.ai with the subject line "Subprocessor Updates".
4. International Data Transfers
Where a sub-processor processes Personal Data outside the European Economic Area (EEA) or the United Kingdom, we rely on:
- EU Standard Contractual Clauses (SCCs) adopted under Commission Implementing Decision (EU) 2021/914
- the UK International Data Transfer Addendum (IDTA) where applicable
- supplementary technical and organizational measures appropriate to the transfer
Further detail is set out in our Privacy Policy and DPA.
5. Contact
For any question about this sub-processor list or to exercise rights related to sub-processing:
Data Protection Officer (DPO) Email: dpo@vorden.ai
LucyHQ, Inc. 131 Continental Dr, Suite 305 Newark, DE 19713, USA Email: legal@vorden.ai Website: https://vorden.ai