For questions about sub-processors, contact privacy@vantaristactiks.com.
Infrastructure
| Provider | Purpose | Location |
|---|---|---|
| Vercel Inc. | Application hosting and CDN | USA |
| Neon Inc. | PostgreSQL database hosting | USA / EU regions |
| Cloudflare Inc. | DNS, email routing, DDoS protection | Global edge network |
Communications
| Provider | Purpose | Location |
|---|---|---|
| Resend Inc. | Transactional email delivery | USA |
| Google LLC | OAuth authentication and Calendar API | Global |
Payments
| Provider | Purpose | Location | Status |
|---|---|---|---|
| Paddle.com Market Ltd. | Merchant of Record — subscription billing, payment processing, invoicing and sales-tax remittance | United Kingdom / USA | Active |
Paddle acts as Merchant of Record: it is the seller of record for every subscription, and it receives the billing contact details (name, email, billing country and, where required, tax identification) needed to charge the card and issue the invoice. It never receives the client records stored in your workspace. Should we transition to or add another Merchant of Record, this list is updated and material changes are announced 30 days in advance.
Compliance
All sub-processors above are bound by data processing agreements requiring:
- Compliance with applicable data protection laws (GDPR, LGPD, CCPA, etc.).
- Equivalent or stronger security standards than those Tactiks applies directly.
- Notification obligations in case of data incidents.
- Restrictions on sub-sub-processing without our prior approval.
Change History
| Date | Change |
|---|---|
| 2026-08-04 | Payments: Paddle.com Market Ltd. listed as the active Merchant of Record, replacing the pending Lemon Squeezy entry |
| 2026-05-18 | Initial sub-processors list published |
Adding New Sub-Processors
Before adding a new sub-processor that materially affects personal data processing, Tactiks will:
- Update this page with the proposed new provider, purpose, and location.
- Send notice to all account holders at the email on file at least 30 days before activation.
- Provide an opportunity to object or, where the change is unacceptable, export data and terminate the account without penalty.
Contact
- Privacy inquiries: privacy@vantaristactiks.com
- Data Protection Officer (DPO): dpo@vantaristactiks.com
- Legal matters: legal@vantaristactiks.com