Sub-processors List

Last updated: April 23, 2026

1. Introduction

VynFi engages the following sub-processors to deliver its services. This list is maintained per our Data Processing Agreement, in accordance with GDPR Article 28 requirements. We notify customers of changes to this list 30 days in advance.

2. Infrastructure Sub-processors

Sub-processor	Purpose	Data Processed	Location
Microsoft Azure	Cloud infrastructure — AKS (compute), PostgreSQL Flexible Server (database), Blob Storage (generated outputs), Container Registry, Key Vault (secrets), Private DNS, Front Door (edge & TLS)	All service data (at rest and in transit)	West Europe (primary region)
Microsoft Entra External ID	Identity, authentication, SSO	Email, display name, OID, authentication events	European Union
Azure Cache for Redis	Rate limiting, short-lived caches	Per-user / per-IP request counters (no personal data; keys are short hashes)	West Europe

3. Payment Sub-processors

Sub-processor	Purpose	Data Processed	Location
Stripe Payments Europe Ltd.	Subscription billing, invoicing, Stripe Tax for EU/CH VAT, credit-pack checkout	Cardholder data (via Stripe Checkout iframe — never touches VynFi servers), billing address, invoice line items	Ireland (primary), United States

4. Communication Sub-processors

Sub-processor	Purpose	Data Processed	Location
Azure Communication Services	Transactional email (magic-link sign-in, job notifications, billing receipts)	Email address, display name, notification content	West Europe

5. Monitoring Sub-processors

Sub-processor	Purpose	Data Processed	Location
Azure Application Insights	Application observability — traces, metrics, error logs	Request traces (method, path, status, duration), error stack traces, minimal user identifiers (UUID) for correlation	West Europe

6. Content Delivery

Sub-processor	Purpose	Data Processed	Location
Azure Front Door	Global edge delivery, TLS termination, WAF, DDoS protection	IP addresses, request metadata, TLS handshake	Global (Azure edge network)

7. Optional Enrichment Sub-processors

The following sub-processors are engaged only when a customer explicitly opts into an AI-enriched generation feature (see the llm section of the generation config). They do not process data for customers who have not enabled those features.

Sub-processor	Purpose	Data Processed	Location
OpenRouter, Inc.	LLM routing for optional name / description enrichment on generated vendors, customers, materials, and findings (Scale tier opt-in)	Synthetic data values only — no personal data ever transits OpenRouter. Requests contain generated entity fields the LLM is asked to enrich.	United States
VynCo (Swiss corporate intelligence)	Reference lookups for Swiss corporate registry data when the generation config enables the “Swiss corporate intelligence” enrichment (opt-in, Team tier and above)	Lookup keys (company name / UID number) — no customer data	Switzerland

8. Changes to Sub-processors

VynFi will notify customers of any intended changes to this sub-processors list through the following process:

30-day advance notice via email to the account administrator before any new sub-processor is engaged or an existing sub-processor is replaced.
Updates posted to this page with a revision date reflecting the most recent change.
Customer objection rights — customers may object to a new sub-processor per the terms of the Data Processing Agreement. If a reasonable objection cannot be resolved, the customer may terminate the affected services without penalty.
Subscribe to updates — send an email to dpa-updates@vynfi.com to be notified of future changes to this list.

Questions?

For questions about this sub-processors list or our data processing practices, contact: dpa@vynfi.com