Legal

Sub-processors

The third parties Vimiana uses to process data on its behalf to run the service, what they do, and where they operate.

Last updated 22 June 2026 · Draft

Draft — pending review

This is a working draft, not final or legally binding wording. It is published so the platform's real behaviour can be reviewed; final wording is pending operator and counsel review before the public launch.

Current sub-processors

We engage the following sub-processors to provide the service. Each is bound to process data only as needed to deliver its function. This list is referenced by the data processing addendum and the privacy policy.

  • Google Cloud Platform — cloud hosting, compute, managed database and object storage. Production runs in the UK / European region (London, europe-west2).
  • Supabase — account authentication and identity.
  • Stripe — payment processing and payouts. Engaged for go-live; payments run in test mode during the pilot, so no live cardholder data is processed yet.

Details and changes

Provisional — pending the tax / merchant-of-record rulingThe full legal entity name, registered location, processing location and DPA link for each sub-processor are being confirmed with counsel and will be added here, together with the mechanism for notifying customers of additions or changes before they take effect.

Questions

To ask about a sub-processor or to object to a change, email privacy@vimiana.com.

Questions about this document? Email privacy@vimiana.com or read the docs before relying on these terms.