Trust Center · Subprocessors
Vendors that may process
customer data.
The current list of subprocessors Vantage uses to run the platform: hosting, infrastructure, analytics, and operations, along with what they handle and where they store data. Updated whenever a vendor is added, replaced, or removed.
Last reviewed: June 22, 2026·Maintained by Vantage as part of our Vendor Management Policy.
Data access levels
- Metadata
- Operational telemetry only — no customer content.
- Customer data
- Processes tenant content under our DPA.
- Sensitive
- Root infrastructure access (encryption keys, storage).
Platform & Hosting
Primary application development platform. Hosts the Vantage codebase, build pipeline, preview/published environments, and managed backend (Lovable Cloud / Supabase).
SOC 2 Type IIEU (primary), USSensitive
Product Analytics
Product usage analytics. Receives event telemetry tied to user IDs.
SOC 2 Type IIUnited StatesCustomer data
Logging / SIEM
Immutable audit log shipping for SOC 2 CC7.2. Receives security events, login anomalies, and infra logs.
SOC 2 Type IIEU (Hetzner)Customer data
Observability
Application error monitoring and performance tracing. May ingest user IDs, emails, and request payloads via stack traces.
SOC 2 Type IIUnited StatesCustomer data
Payments
Payment processing, billing, and subscription management for seats.
SOC 2 Type IIUS (multi-region)Sensitive
Notification of changes
Customers with an active subscription receive 30 days advance notice when a new subprocessor is added or replaced. To object to a change, contact legal@vantage-now.com.
