Subprocessors
Last updated: 4 November 2026 · Hevia is a product of evioe studio.
This version has been checked against Vela’s actual technical architecture. A review by a lawyer is still pending.
Active subprocessors
These providers process data for Hevia today. We use no others.
| Provider | Purpose | Location of processing | Basis |
|---|---|---|---|
| Vercel Inc., Covina (USA) | Hosting of the website, dashboard and chat; storage of the encrypted backups | Frankfurt; delivery through a worldwide network; the company processes primarily in the USA | Vercel Data Processing Addendum with EU standard contractual clauses (applies only from the Pro plan, the move is still pending, see note); DPF certified |
| Databricks, Inc. (Neon), San Francisco (USA) | Database for accounts, businesses, knowledge, conversations and requests | Frankfurt (AWS) | Data Processing Addendum under the Neon terms, applicable version still being clarified; DPF certified |
| Mistral AI SAS, Paris (France) | AI service: answers in the chat, proposals when reading a website | Data centres in the EU and EFTA countries | Mistral Data Processing Addendum |
For the providers based in the USA, the European Commission’s adequacy decision on the EU-US Data Privacy Framework of 10 July 2023 (Implementing Decision (EU) 2023/1795) applies; the providers’ data processing terms also provide for EU standard contractual clauses. Even where data is stored in Frankfurt, these companies are subject to US law.
Planned, not yet active
| Provider | Purpose | Location of processing | Status |
|---|---|---|---|
| Plus Five Five, Inc. (Resend), San Francisco (USA) | Sending emails: password resets, new requests to the business, incident alerts | Sending via the EU region (Ireland) intended; account data, metadata and logs in the USA | Not active yet |
Changes
If a subprocessor is added or replaced, we inform our customers at least 30 days in advance by email or in the dashboard. Customers may object on important data protection grounds; the details are set out in the DPA.
Vercel’s Data Processing Addendum expressly refers to the Pro and Enterprise plans. Hevia is not on either plan yet and will move to the Pro plan before any real visitor data is processed.
This English version is provided for convenience. If the two versions differ, the German version prevails.