Sub-processors
Last updated: 2026-07-21
To operate Vectares we rely on a small set of vetted sub-processors. Each processes only the data needed for its function, under a data-processing agreement. Your customers’ commercial data (names, prices, references, cargo, chat) is encrypted at rest with a per-company key; AI order extraction runs with a zero-retention configuration.
Anthropic (AI order extraction)
Purpose: reading uploaded order documents (PDF/photo/text) to pre-fill an order draft. Data: the document you submit for extraction. Location: EU/US. Safeguard: zero data-retention configuration (inputs/outputs are not stored or used for training) + DPA. Optional feature — used only when you choose “Add order · AI”.
HERE Global B.V. (maps, routing, tolls)
Purpose: truck routing, map tiles, ETA and toll calculation. Data: stop coordinates and route geometry. Location: EU. Safeguard: DPA; no customer identities are sent — only geographic points.
Daimler Truck / Fleetboard & telematics providers
Purpose: importing live vehicle positions, fuel and tachograph/driving-time data for the trucks you connect. Data: vehicle and driver telematics from your own fleet account. Location: EU. Safeguard: your credentials are encrypted at rest; data is pulled on your instruction.
Stripe Payments Europe (billing)
Purpose: processing online top-ups/subscription payments where enabled. Data: billing contact and payment metadata (card data is handled by Stripe, never stored by us). Location: EU/US. Safeguard: PCI-DSS; DPA.
Twilio SendGrid (transactional email)
Purpose: sending account, verification, compliance-digest and notification emails. Data: recipient email address and message content. Location: EU/US. Safeguard: DPA; used only for service emails, not marketing without consent.
Expo / push providers (FCM, APNs)
Purpose: delivering push notifications to the driver and dispatch mobile app. Data: device push token and notification content. Location: EU/US. Safeguard: notifications are transient; no sensitive commercial data is stored by the provider.
Hosting (EU data centre)
Purpose: running the application and database. Data: all Service data, encrypted at rest for sensitive commercial fields. Location: EU. Safeguard: single-tenant database with per-company row isolation; access controls and audit logging.
Contact & changes
We will keep this list current and give reasonable notice of new sub-processors. Questions or objections: office@digiohs.com.