Trust
Subprocessors
The infrastructure providers Vaubaan relies on, what each one sees, and where they run.
We notify customers of new subprocessors at least 14 days before they go live. Subscribe to changes by emailing trust@vaubaan.com.
| Subprocessor | Purpose | Data | Region |
|---|---|---|---|
| Supabase | Managed Postgres, authentication, and edge storage for organizational data and audit logs. | Account data, organization data, encrypted provider tokens, audit log. | EU (Frankfurt) |
| Vercel | Application hosting for the dashboard and the MCP gateway functions. | HTTP request logs, runtime telemetry. No customer payloads. | EU (Frankfurt) + global edge |
| Cloudflare | DNS, DDoS protection, WAF in front of vaubaan.com. | IP address, user agent, request metadata. | Global |
| Resend | Transactional email delivery (sign-in links, security notifications). | Email address, message metadata. | EU |
| Stripe | Subscription billing and payment processing. | Billing contact, payment metadata (no card data passes through Vaubaan). | EU + global |