Subprocessor Register
Last updated: 29 September 2026
VelocityHero AB engages the following service providers to operate the VelocityHero product and website. This register supports our Privacy Policy and Data Processing Addendum. Locations are typical processing regions used by the provider; exact routing may vary.
Product / service providers below may process Controller Personal Data under the DPA. Marketing website providers process data where VelocityHero acts as controller (for example optional analytics cookies) and are outside the scope of the customer DPA.
Product / service (DPA subprocessors)
| Provider | Purpose | Typical location |
|---|---|---|
| Vercel Inc. | Application hosting and edge delivery | EU / US (provider regions) |
| Supabase (Postgres / Auth) | Database, authentication, and related backend services | EU (Ireland / eu-west-1) |
| Inngest Inc. | Background job orchestration for product pipelines | US / provider infrastructure |
| Postmark (ActiveCampaign) | Transactional email delivery | US / provider infrastructure |
| New Relic, Inc. | Application monitoring, synthetics, and operational alerting | US / EU (provider regions) |
| OpenAI, L.L.C. | Optional wording polish of derived scores, zones, and pre-written coaching text (not raw Jira ticket bodies or Slack message history) | US / provider infrastructure |
Marketing website (VelocityHero as controller)
| Provider | Purpose | Typical location |
|---|---|---|
| Google LLC (Google Analytics 4) | Optional website analytics — only if you accept analytics cookies | US / global (Google) |
Updates
We may update this register when providers change. For product subprocessors that process Controller Personal Data, customers will receive at least 30 days’ notice of additions or replacements as required under the DPA, with an opportunity to object on legitimate data-protection grounds. Questions: hello@velocityhero.com.