Subprocessors
Current status
This register must describe only infrastructure that can actually receive customer or user personal data. A provider being used somewhere in VALO development does not by itself make it a subprocessor for every service.
Cloudflare
Web delivery, DNS and security services may be used on public VALO domains. The exact processing role depends on the deployed surface.
GitHub
Source hosting and deployment-related workflows may be used. Customer data should not be placed in source repositories unless explicitly agreed for the relevant service.
Other providers
Railway, Vercel, model providers, email providers or other infrastructure must be added here before they are used as subprocessors for covered personal data. This page intentionally does not claim use, region or transfer terms that have not yet been verified.
Change control
Material additions or replacements affecting covered processing will be reflected here and, where contractually required, communicated under the applicable agreement.
Contact
Questions about a specific service's processing chain: njaal@valoresearch.org