Effective date: May 9, 2026 · Last updated: May 9, 2026
Velance uses a small set of trusted third-party service providers ("Subprocessors") to deliver the Service. We require each Subprocessor to maintain appropriate technical and organizational security measures and to process Customer Data only to provide their service to us. The list below is current as of the date above and is updated whenever a Subprocessor is added or replaced.
| Subprocessor | Purpose | Data | Location |
|---|---|---|---|
| Supabase, Inc. supabase.com |
Primary application database, authentication, file storage, edge-function runtime | All Customer Data | United States |
| Vercel Inc. vercel.com |
Web-application hosting and content delivery | Application traffic, request logs | United States |
| Subprocessor | Purpose | Data | Location |
|---|---|---|---|
| Anthropic, PBC anthropic.com |
AI model inference for drafting, classification, summarization, and tool use | Prompt content (lead context, message text); not retained for model training under enterprise terms | United States |
| OpenAI, L.L.C. openai.com |
AI model inference for speed-tier drafting and classification | Prompt content; not retained for model training (API default) | United States |
| Google LLC cloud.google.com |
AI model inference (Gemini) for speed-tier and depth-tier tasks | Prompt content; not retained for model training under Vertex AI terms | United States |
| Subprocessor | Purpose | Data | Location |
|---|---|---|---|
| Twilio Inc. twilio.com |
SMS and voice delivery, A2P 10DLC registration | Phone numbers, message content, delivery metadata | United States |
| Twilio SendGrid Inc. sendgrid.com |
Email delivery and inbound parsing | Email addresses, message content, engagement metadata | United States |
| Subprocessor | Purpose | Data | Location |
|---|---|---|---|
| Expo, Inc. expo.dev |
Mobile-app push notifications and over-the-air updates | Push tokens, app version, crash diagnostics | United States |
| Apple Inc. apple.com |
App distribution, push-notification routing (APNs) | Push tokens, distribution metadata | United States |
| Subprocessor | Purpose | Data | Location |
|---|---|---|---|
| Functional Software, Inc. (Sentry) sentry.io |
Error and performance monitoring | Error events, browser/device, scrubbed request data; PII removed before transmission | United States |
The following providers receive data only when a dealership chooses to connect the corresponding integration:
| Provider | Purpose | Data |
|---|---|---|
| Dealer Management Systems (Reynolds, CDK, Tekion, DealerTrack, Advent, and others, as connected by Customer) | Customer / deal / inventory / RO synchronization | As determined by the integration scope |
| OEM and lead-provider feeds (e.g., FordDirect, Edmunds, Cars.com, AutoTrader, ADF/XML email feeds) | Inbound lead delivery | Lead form data submitted by the consumer |
For questions about Subprocessors, including SOC 2 reports, security questionnaires, or DPAs from any vendor above, contact privacy@velancecrm.com.