Sub-Processor List

This list identifies the third parties that process personal data on Velqory's behalf. It is maintained under the Data Processing Agreement.

• Velqory-operated infrastructure — hosting, storage and processing of customer content.
• Cloudflare — DNS, TLS and tunnel transport for public traffic. It may process IP addresses and request metadata, including outside the EEA, under Cloudflare's DPA and transfer safeguards.
• Google Ireland Limited (Google Analytics) — audience measurement of the website, only for visitors who accept analytics cookies. Data may be transferred to Google LLC in the United States, under the EU-US Data Privacy Framework and standard contractual clauses.
• Email hosting provider — mailboxes and delivery of transactional and contact-form email. Identity available on request.
• GitHub (Microsoft) — hosting of Velqory's code and project repository, which may contain customer content. Processing may take place outside the EEA.
• Anthropic (Claude Code) and OpenAI (Codex) — AI tools used by Velqory in development and operations work, which may process customer content, including outside the EEA.
• Moloni — certified invoicing software.
• Model providers — where a contracted service uses a third-party model provider, it is identified in the proposal.

We notify customers of new or replacement sub-processors before they begin processing, with a reasonable window to object on legitimate data-protection grounds. Where an objection cannot be resolved, you may terminate the affected service in line with the Terms.

Questions about changes to this list: suporte@velqory.com.