Sub-processors
Document published by Vitruhome, a French simplified joint-stock company (SAS) registered with the Salon-de-Provence Trade and Companies Register under number 994 224 715, operating the “Vitru’home” brand. See the legal notice.
This English translation is provided for convenience only. The French version is the legally binding one and prevails in case of discrepancy. French version
Vitru'home selects its sub-processors carefully, taking into account their guarantees regarding the protection of Personal Data (certifications, location, technical and organisational measures, transfer frameworks). Each sub-processor is bound to Vitru'home by a written agreement imposing obligations substantially equivalent to those of our DPA.
Objection to a new sub-processor. In accordance with Section 7.2 of the DPA, any Customer may object to the addition of a new sub-processor, on legitimate and reasonable grounds relating to the Applicable Data Protection Law, by notifying its written objection to team@vitruhome.com within ten (10) days following the notification of the change.
Receive change notifications
To be informed by email of any addition, replacement or removal of a sub-processor, send a subscription request to team@vitruhome.com with the subject “Sub-processor notifications subscription” and stating the contact email to be used.
You can unsubscribe at any time by simple request to the same address.
Hosting & infrastructure
Hosting of the web applications, APIs and databases used by the Vitru'home Services.
| Sub-processor | Role | Location | Transfer safeguard |
|---|---|---|---|
| Vercel Inc. | Hosting of the Next.js applications, CDN, edge functions, request logs, temporary storage of report fragments (Vercel Blob), and orchestration of asynchronous processing (durable workflow engine). The execution state kept to allow processing to resume, including the inputs and outputs of each step, is encrypted by the engine under a key specific to each execution; only step names and timestamps remain in clear text. The right to decrypt follows the right to access the project’s environment variables, and each decryption is recorded in the audit log. | European Union, Paris (cdg1): the four applications run their server functions there, the state of asynchronous processing is pinned there, and Vercel Blob temporary storage is configured in the European Union region. Vercel Inc. is a company governed by US law, and the content delivery network (CDN) serves static content from points of presence worldwide. | Processing within the EEA for execution. EU-US Data Privacy Framework + SCCs Module 2 for the US entity and for delivery through the CDN. |
| Supabase Inc. | Main PostgreSQL database (auth, content, metadata), object storage, Realtime. | European Union, Paris (eu-west-3) | Processing within the EEA (no transfer to a third country) |
| Amazon Web Services, Inc. | Training of vision models (SageMaker), dataset storage (S3), GPU inference, document OCR (Amazon Textract), text vectorisation (Amazon Titan via Vercel AI Gateway). | European Union, Paris (eu-west-3) for all the services used, including the training of vision models. | Processing within the EEA. As Amazon Web Services, Inc. is a company governed by US law: SCCs Module 2 + EU-US DPF for the entity. |
Artificial intelligence models (LLM & vision)
Providers of the models used for AI chat, document analysis and plan reading. A single inference route, the Vercel AI Gateway; the model served depends on the deployment configuration. OCR of scanned documents goes through Amazon Textract, listed above.
| Sub-processor | Role | Location | Transfer safeguard |
|---|---|---|---|
| Vercel Inc. (AI Gateway) | Inference gateway routing calls to the Gemini (Google Cloud) or Claude (Anthropic) models, and text vectorisation (Amazon Titan, served by Amazon Bedrock). | Headquarters in the United States. Language models: inference pinned to the European Union zone on every call; the gateway refuses the call rather than serving it outside the zone. Vectorisation: zero retention requested, inference zone not selectable. | EU-US Data Privacy Framework + SCCs Module 2. Zero Data Retention requested on every call (no retention or use of prompts/outputs for training). |
| Google Cloud EMEA Limited (Vertex AI) | Gemini models (document analysis, AI chat, vision). | European Union: EU inference zone enforced by the gateway. | Processing within the EEA. Google Cloud EMEA Limited is established in Ireland; SCCs Module 2 + EU-US DPF for the group. |
| Anthropic PBC | Claude models (advanced AI chat, long-context reasoning), depending on the deployment configuration. | Headquarters in the United States. Inferences served within the European Union through the gateway (europe-west1 region measured). | EU-US Data Privacy Framework + SCCs Module 2. Zero Data Retention requested on every call. |
Payment
Management of payments, billing and subscriptions.
| Sub-processor | Role | Location | Transfer safeguard |
|---|---|---|---|
| Stripe Payments Europe, Ltd. | Card payment processing, subscription management, billing. | Ireland (European entity). Stripe Inc. in the United States for technical processing. | EU contracting entity. SCCs + EU-US DPF for the US components. |
Transactional emails & communication
Sending of transactional emails (sign-up, confirmations, notifications).
| Sub-processor | Role | Location | Transfer safeguard |
|---|---|---|---|
| Resend, Inc. | Sending of transactional emails. | United States | EU-US Data Privacy Framework + SCCs Module 2 |
| Nylas, Inc. | Project mailbox and reminders for supporting documents: email bodies, attachments, participants. | European Union (api.eu.nylas.com); Nylas, Inc. in the United States for the entity. | Processing within the EEA. SCCs + EU-US DPF for the US components. |
Document generation
Conversion and formatting of the deliverables (reports) exported by the Services.
| Sub-processor | Role | Location | Transfer safeguard |
|---|---|---|---|
| Amazon Web Services, Inc. | Conversion of DOCX reports to PDF (self-hosted Gotenberg on ECS) and rasterisation of PDF plans into images (Lambda function). The document is processed and then deleted; it is not retained. | European Union, Paris (eu-west-3). | Processing carried out entirely within the EEA: no transfer to a third country for this purpose. |
Authentication
Sign-in of users who choose single sign-on rather than a password.
| Sub-processor | Role | Location | Transfer safeguard |
|---|---|---|---|
| Google LLC (Sign-In) | Single sign-on (SSO), at the user’s sole choice: Google receives the sign-in request and returns to us the account identifier, email address, name and avatar. No document or customer content is sent to it. For its own Google account, Google acts as an independent controller and not as a processor; the entry is listed here for transparency. Users who sign in with a password are not concerned. | United States | EU-US Data Privacy Framework + SCCs Module 2 |
Security & abuse protection
Protection of forms and entry points against bots and abuse attempts.
| Sub-processor | Role | Location | Transfer safeguard |
|---|---|---|---|
| Cloudflare, Inc. | Anti-bot protection of forms (Turnstile): IP address, user agent and verification token. No form content is transmitted. Cloudflare also provides the authoritative DNS service for the vitruhome.com domain. The applications are NOT served through the Cloudflare network: delivery is provided by Vercel, and rate limiting is enforced by our own code. | United States and global network of points of presence. | EU-US Data Privacy Framework + SCCs Module 2 |
Mapping & geocoding
Map display, address geocoding and geographical enrichment for the Site analysis module.
| Sub-processor | Role | Location | Transfer safeguard |
|---|---|---|---|
| Mapbox Inc. | Interactive maps, vector tiles, map styles. | United States | EU-US Data Privacy Framework + SCCs Module 2 |
| Google LLC (Maps Platform) | Geocoding, Places API, Street View (specific uses). | United States | EU-US Data Privacy Framework + SCCs Module 2 |
Observability & monitoring
Technical monitoring of the applications, error analysis and observability of LLM pipelines.
| Sub-processor | Role | Location | Transfer safeguard |
|---|---|---|---|
| PostHog Inc. | Audience measurement, heatmaps and session recording: subject to consent, and limited to the publisher’s accounts on the business applications. Displayed text is masked. LLM pipeline observability: server-side, on technical metrics only (model, costs, tokens, latency, errors) and without the content of exchanges. | European Union, eu.posthog.com | Processing within the EEA |
| Functional Software, Inc. (Sentry) | Application error tracking (legitimate interest) and application performance measurement (traces), subject to “performance” consent. No session recording (Session Replay) is carried out: the corresponding integration is not enabled. | European Union, “European Union” storage region configured on our organisation. | Processing within the EEA |
Last updated: 11 September 2026