Trust Center · Subprocessors

    Vendors that may process customer data.

    The current list of subprocessors Vantage uses to run the platform: hosting, infrastructure, analytics, and operations, along with what they handle and where they store data. Updated whenever a vendor is added, replaced, or removed.

    Last reviewed: June 22, 2026·Maintained by Vantage as part of our Vendor Management Policy.

    Data access levels

    Metadata
    Operational telemetry only — no customer content.
    Customer data
    Processes tenant content under our DPA.
    Sensitive
    Root infrastructure access (encryption keys, storage).

    Platform & Hosting

    • Primary application development platform. Hosts the Vantage codebase, build pipeline, preview/published environments, and managed backend (Lovable Cloud / Supabase).

      SOC 2 Type IIEU (primary), USSensitive

    Product Analytics

    • Product usage analytics. Receives event telemetry tied to user IDs.

      SOC 2 Type IIUnited StatesCustomer data

    Logging / SIEM

    • Immutable audit log shipping for SOC 2 CC7.2. Receives security events, login anomalies, and infra logs.

      SOC 2 Type IIEU (Hetzner)Customer data

    Observability

    • Application error monitoring and performance tracing. May ingest user IDs, emails, and request payloads via stack traces.

      SOC 2 Type IIUnited StatesCustomer data

    Payments

    • Payment processing, billing, and subscription management for seats.

      SOC 2 Type IIUS (multi-region)Sensitive

    Notification of changes

    Customers with an active subscription receive 30 days advance notice when a new subprocessor is added or replaced. To object to a change, contact legal@vantage-now.com.