Trust
Sub-processors
Last updated: July 1, 2026
GetDocVault, Inc. uses the third-party services below to operate DocVault. Each is bound by a data processing agreement and processes data only as needed to deliver its part of the Service. This list is referenced by our Privacy Policy and Security pages.
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Vercel Inc. | Application hosting, serverless compute, private file storage (Blob) | Uploaded documents, account data, request logs | United States |
| Neon, Inc. | Managed PostgreSQL database | Account data and document metadata (not file contents) | United States |
| Amazon Web Services, Inc. (KMS + S3) | Encryption key management (per-tenant master keys); backup storage for encrypted document files (S3) | Encryption keys (KMS); encrypted document blobs written on upload for disaster-recovery purposes (S3) | United States |
| Resend (Plus Five Five, Inc.) | Transactional email delivery | Recipient email, name, room/notification content | United States |
| Stripe, Inc. | Subscription billing and payment processing | Billing contact, payment method (we never store raw card numbers) | United States |
| Ably Real-time Ltd. | Realtime messaging (live room and dashboard updates) | Workspace/room identifiers; no document contents | United Kingdom / global edge |
| Upstash, Inc. | Managed Redis for rate limiting and abuse prevention | Hashed email addresses and user identifiers in short-lived rate-limit counters; no document contents | United States |
| Functional Software, Inc. (Sentry) | Application error and performance monitoring | Diagnostic and error telemetry | United States |
| BetterStack, s.r.o. (Better Stack) | Uptime monitoring and alerting | Service availability metrics; no customer data | European Union |
We will update this page before adding or replacing a sub-processor that handles personal data. To be notified of changes, or to raise an objection, contact privacy@getdocvault.com.