Subprocessors & Service Providers
Last Updated: July 13, 2026
VaultMotive, LLC uses a limited set of third-party service providers ("subprocessors") to operate the Service. This page lists the providers that may process personal information on our behalf, what they process, and where. Each provider is bound by contractual obligations to protect the data and to use it only to provide services to us. For how we handle personal information generally, see our Privacy Policy.
Subprocessors of Personal Information
| Provider | Purpose | Data Processed | Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting, document and image storage (S3), content delivery (CloudFront), and document OCR (Textract) | All stored content, including uploaded documents and photos | United States |
| Stripe, Inc. | Payment processing, subscription billing, and invoicing | Billing contact details, payment method (card data is held by Stripe, not VaultMotive) | United States |
| Twilio Inc. | SMS delivery (verification codes, notifications) | Phone numbers, SMS message content | United States |
| Twilio SendGrid | Transactional and notification email delivery | Email addresses, email message content | United States |
| OpenAI, L.L.C. | AI processing: document extraction and classification, image analysis, and voice transcription | Document images and content, voice recordings submitted to AI features | United States |
| Anthropic, PBC | AI processing: document and text extraction, classification, and image analysis | Document images and content submitted to AI features | United States |
| Functional Software, Inc. (Sentry) | Application error and crash monitoring | Error diagnostics, which may include user identifiers and request context | United States |
| PostHog, Inc. | Product usage analytics (only with your consent) | Usage events, user and organization identifiers | United States |
| Cloudflare, Inc. | Bot and abuse protection (Turnstile) on sign-up and sign-in pages | IP address and browser signals used for bot detection | United States (global network) |
| Google LLC | Optional Sign in with Google; push notification delivery (Firebase Cloud Messaging) for the Android app; website analytics (Google Analytics) and advertising conversion measurement (Google Ads) on the marketing site — you can opt out anytime via cookie preferences | Sign-in: name, email address, profile picture. Push: device tokens, notification content. Analytics: site usage data. Advertising: ad click identifiers and hashed conversion data (email hashed before any send) | United States |
| Meta Platforms, Inc. | Advertising measurement and retargeting on the marketing site — Meta Pixel plus a server-side Conversions API event when a contact/early-access form is submitted; you can opt out anytime via cookie preferences | Ad click identifiers, Meta cookie identifiers (_fbp/_fbc), hashed email address, page URL, browser user agent | United States |
| Apple Inc. | Optional Sign in with Apple; push notification delivery (APNs) for the iOS app | Sign-in: name, email address. Push: device tokens, notification content | United States |
Vehicle Data Services
The following services receive vehicle identifiers and specifications only (such as VINs, make/model/year, and listing parameters) to power VIN decoding, valuations, and market pricing. They do not receive your name, contact details, or account information.
| Provider | Purpose |
|---|---|
| NHTSA vPIC (U.S. Dept. of Transportation) | VIN decoding against the public federal vehicle database |
| visor.vin | Market listing and valuation data for vehicles |
| Tavily | Web search for vendor pricing and market comparisons |
| Apify | Structured collection of public auction results and listings |
| Firecrawl | Web data retrieval for vendor pricing lookups |
Updates to This List
We update this page before engaging a new subprocessor that will process customer personal information. If you have questions about our subprocessors, or would like to be notified of changes to this list, contact privacy@vaultmotive.app.