Legal
Sub-processors
The third parties that process data on our behalf in order to deliver Version X. This list is checked against the product’s own dependencies rather than assembled from memory, and it was last verified on 30 September 2026.
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase | Application database and authentication | All customer-entered records, account credentials and session data | To be confirmed per customer project region |
| Vercel | Application hosting and content delivery | Request metadata including IP address; no customer records at rest | Global edge network |
| Resend | Transactional email delivery | Recipient name and email address, and message content | To be confirmed |
| Anthropic | The AI layer: Ori and the agent team | The records relevant to a given request, sent at the time of the request | To be confirmed |
| Google Cloud Storage | File and attachment storage | Files uploaded by customers | To be confirmed per bucket |
| Stripe | Payment processing and subscription billing | Billing contact details and payment method; card data never reaches Version X | Global, per Stripe’s own data processing terms |
Not yet complete
Processing locations are marked “to be confirmed” where we have not yet verified the specific region with the provider. We would rather publish that honestly than state a region we have not checked. If you need these confirmed for a security review, write to hello@versionx.co and we will confirm them in writing.