Velou Sub-Processors

Last Updated: January 01, 2025

Velou is committed to maintaining the trust of our customers by transparently disclosing the third-party service providers ("Sub-Processors") we engage to process personal data on behalf of our customers. This page outlines the Sub-Processors we currently utilize, the nature of services they provide, and their locations.

‍

1. Introduction

To deliver our services efficiently, Velou engages certain third-party Sub-Processors. These entities process personal data as necessary to support our platform's functionality. Each Sub-Processor is contractually obligated to adhere to data protection obligations consistent with Velou's commitments to its customers.

‍

2. List of Current Sub-Processors

‍

Sub-Processor Applicable Service(s) Nature and Purpose of Processing Categories of Personal Data Location(s) of Processing Security Measures
Amazon Web Services (AWS) All services Infrastructure provider hosting Velou’s solution components, configurations, and microservices Application data, configuration metadata, and operational logs (no PII) USA AWS Compliance Programs
Google Cloud Platform Storage, Backup, ML services Cloud storage and ML model processing Metadata used for internal analytics activities (no PII) USA Google Cloud Compliance
MongoDB Atlas Database layer Managed database services for product data storage Product data (no PII) USA MongoDB Atlas Security
Elasticsearch (Elastic Cloud) Search infrastructure Search indexing and retrieval Product metadata (no PII) USA Elastic Cloud Security
Datadog Monitoring Infrastructure metrics, logs, and alerting Operational metadata, logs (no PII) USA Datadog Security Practices
Slack Technologies Internal communication Messaging and alerting among team members Internal user data (Velou team) USA Slack Security Controls
Atlassian (Jira, Confluence) Project management and documentation Issue tracking, documentation, and workflow management Internal operational metadata USA Atlassian Trust Center
Bitbucket (Atlassian) Code repository and CI/CD Source code hosting and CI/CD pipeline integration Internal developer data USA Atlassian Trust Center
Okta Identity and access management SSO, access control, authentication for internal systems Velou admin login and access metadata USA Okta Security & Compliance

‍Note: This list is subject to change as we continue to enhance our services.

‍

3. Data Processing and Protection

‍

Each Sub-Processor listed above has undergone a thorough assessment to ensure they provide adequate safeguards for personal data. Velou ensures that:

  • Data processing agreements are in place with each Sub-Processor.
  • Sub-Processors implement appropriate technical and organizational measures to protect personal data.
  • Data transfers comply with applicable data protection laws and regulations.


4. Notification of Changes

We will update this page to reflect any changes to our Sub-Processors.
‍

5. Questions and Contact

If you have any questions or concerns regarding our Sub-Processors, please contact us at:

Email: privacy@velou.com