Subprocessor List
Vela Cloud Ltd, operating as Vela
Last updated: May 18, 2026
This page lists the third party subprocessors that Vela Cloud Ltd engages to deliver the Vela platform. Each subprocessor is bound by a data processing agreement and may only process customer data for the specific purpose described below.
We will provide at least 14 days' notice before adding or replacing a material subprocessor, by updating this page and notifying customers via email or in-platform notice. For questions, contact privacy@usevela.io.
Current subprocessors
| Provider | Category | Purpose | Data processed | Location |
|---|---|---|---|---|
| Clerk | Identity & authentication | User login, session management, and MFA | Name, email, session tokens | USA (SOC 2 Type II) |
| Cloudflare | Cloud infrastructure | Platform compute, database storage, file storage, and CDN | All customer data | Global (SOC 2 Type II, ISO 27001) |
| Paddle.com | Payment processing | Subscription billing and payment collection. Acts as Merchant of Record. | Billing name, email, payment card data | UK / USA (PCI DSS Level 1) |
| Anthropic | AI processing | Powers the Insights Assistant feature. Data is not retained beyond the immediate request and is not used for model training. | AI query content (may include CRM context) | USA (SOC 2 Type II) |
| Chatbase | AI support chat |
Website AI support chat widget.
Transfer mechanism: Standard Contractual Clauses (EC Decision 2021/914, Module 2). DPA incorporated by reference in Chatbase Terms of Service. Available at chatbase.co/legal/dpa.
|
Support chat conversations, IP addresses | USA |
| Resend | Transactional email | Billing receipts, trial expiry notices, and account alerts | Name, email address | USA (SOC 2 Type II) |
Change Log
18 May 2026
Documented Standard Contractual Clauses (EC Decision 2021/914, Module 2) transfer mechanism for Anthropic and Clerk in the DPA. Confirmed Chatbase DPA is incorporated by reference in Chatbase Terms of Service (no separate countersigned DPA required).
12 Apr 2026
Initial subprocessor list published. Migrated from Privacy Policy Section 5.
Contact
For questions about our subprocessors or to request a countersigned Data Processing Addendum, contact privacy@usevela.io.