For questions about sub-processors, contact privacy@vantaristactiks.com.
Infrastructure
| Provider | Purpose | Location |
|---|---|---|
| Vercel Inc. | Application hosting and CDN | USA |
| Neon Inc. | PostgreSQL database hosting | USA / EU regions |
| Cloudflare Inc. | DNS, email routing, DDoS protection | Global edge network |
Communications
| Provider | Purpose | Location |
|---|---|---|
| Resend Inc. | Transactional email delivery | USA |
| Google LLC | OAuth authentication and Calendar API | Global |
Payments
| Provider | Purpose | Location | Status |
|---|---|---|---|
| Lemon Squeezy LLC | Merchant of Record (primary) | USA | Pending activation |
Note: We may transition to or add additional payment Merchants of Record (such as Paddle.com Market Ltd.) as our operations evolve. Changes to the payment processor are reflected in this list and announced 30 days in advance when material.
Compliance
All sub-processors above are bound by data processing agreements requiring:
- Compliance with applicable data protection laws (GDPR, LGPD, CCPA, etc.).
- Equivalent or stronger security standards than those Tactiks applies directly.
- Notification obligations in case of data incidents.
- Restrictions on sub-sub-processing without our prior approval.
Change History
| Date | Change |
|---|---|
| 2026-05-18 | Initial sub-processors list published |
Adding New Sub-Processors
Before adding a new sub-processor that materially affects personal data processing, Tactiks will:
- Update this page with the proposed new provider, purpose, and location.
- Send notice to all account holders at the email on file at least 30 days before activation.
- Provide an opportunity to object or, where the change is unacceptable, export data and terminate the account without penalty.
Contact
- Privacy inquiries: privacy@vantaristactiks.com
- Data Protection Officer (DPO): dpo@vantaristactiks.com
- Legal matters: legal@vantaristactiks.com