Vensor uses the companies below to run the product. Each one is bound by contract to protect your data, to use it only to provide the service to us, and to meet the same obligations we owe you. They are not free to use your data for their own purposes.
Sub-processors
Last updated: September 3, 2026
Who we use, and what for
| Company | What they do for us | What they can see | Where |
|---|---|---|---|
| Supabase | Database, authentication and file storage | Account data, synced ticket and call records, uploaded policy documents | United States |
| OpenAI | Analysis of ticket and call content against your policies | Ticket and call text, with personal details removed before sending | United States |
| Cloudflare R2 | File storage for the policy documents you upload | Uploaded policy documents and images taken from them, including any personal details they contain | Global |
| Anthropic | Company information extraction during account setup | Publicly available company information | United States |
| Vercel | Application hosting and content delivery | Request metadata, IP addresses | United States |
| Resend | Email delivery, including account and password-reset messages | Recipient name and email address, and the confirmation and password-reset links each message carries | United States |
| Stripe | Subscription billing and payment processing | Billing contact details and payment information | United States |
| PostHog | Product analytics, to see which features are used | Usage events, account identifiers | United States |
| Sentry | Error monitoring, so faults are found and fixed | Error reports and diagnostic context | United States |
What this does not mean
These companies are service providers acting on our instructions, not parties we share your data with for their own use. Your ticket content is never sold, and it is never used to train AI models. Before ticket or call text is sent for analysis, personal details are removed from it.
Changes to this list
This page is updated when a sub-processor is added or removed, and the date at the top reflects the last change. If you have a data processing agreement with us that requires advance notice, we will notify you as that agreement sets out.