Subprocessor List
Vela Cloud Ltd, operating as Vela
Last updated: June 2, 2026
This page lists the third party subprocessors that Vela Cloud Ltd engages to deliver the Vela platform. Each subprocessor is bound by a data processing agreement and may only process customer data for the specific purpose described below.
We will provide at least 14 days' notice before adding or replacing a material subprocessor, by updating this page and notifying customers via email or in-platform notice. For questions, contact [email protected].
Current subprocessors
| Provider | Category | Purpose | Data processed | Location |
|---|---|---|---|---|
| Clerk | Identity & authentication | User login, session management, and MFA | Name, email, session tokens | USA (SOC 2 Type II) |
| Cloudflare | Cloud infrastructure | Platform compute, database storage, file storage, and CDN | All customer data | Global (SOC 2 Type II, ISO 27001) |
| Paddle.com | Payment processing | Subscription billing and payment collection. Acts as Merchant of Record. | Billing name, email, payment card data | UK / USA (PCI DSS Level 1) |
| Anthropic | AI processing | Powers the Insights Assistant feature. Data is not retained beyond the immediate request and is not used for model training. | AI query content (may include CRM context) | USA (SOC 2 Type II) |
| Chatbase | AI support chat |
Website AI support chat widget.
Transfer mechanism: Standard Contractual Clauses (EC Decision 2021/914, Module 2). DPA incorporated by reference in Chatbase Terms of Service. Available at chatbase.co/legal/dpa.
|
Support chat conversations, IP addresses | USA |
| Resend | Transactional email | Billing receipts, trial expiry notices, and account alerts
Transfer mechanism: Standard Contractual Clauses (EC Decision 2021/914, Module 2). DPA available at resend.com/dpa.
|
Name, email address | USA (SOC 2 Type II) |
| UserWay | Accessibility & compliance | Website accessibility widget for WCAG compliance. Users can customize font size, contrast, dyslexia font, and other accessibility features. | User accessibility preferences, IP address | USA (SOC 2 Type II) |
Change Log
18 May 2026
Documented Standard Contractual Clauses (EC Decision 2021/914, Module 2) transfer mechanism for Anthropic and Clerk in the DPA. Confirmed Chatbase DPA is incorporated by reference in Chatbase Terms of Service (no separate countersigned DPA required).
12 Apr 2026
Initial subprocessor list published. Migrated from Privacy Policy Section 5.
Contact
For questions about our subprocessors or to request a countersigned Data Processing Addendum, contact [email protected].