How many subprocessors does Vercel use?

Vercel lists 28 subprocessors on its published list, including Amazon Web Services (AWS), Google, Microsoft, Datadog, and Honeycomb and 23 more.

Where does Vercel process customer data?

The subprocessors named by Vercel are located in United States, Spain, and United Kingdom, as stated on its list.

Does Vercel use customer data to train AI models?

According to its terms of service, Vercel uses customer data to train AI models unless customers opt out: “if you are on a Hobby plan or trial Pro plan, you agree that we may use Your Content to train our artificial intelligence ("AI") and machine learning models”

How quickly does Vercel report a personal data breach to customers?

According to its DPA, Vercel reports a personal data breach to customers without undue delay, with no set deadline: “upon becoming aware of a confirmed Security Incident, Vercel will notify Customer without undue delay unless prohibited by applicable law.”

How much notice does Vercel give before adding a subprocessor?

Vercel's DPA gives 5 days' notice of a new subprocessor, the time customers have to object: “If, within five (5) calendar days after such notice, Customer notifies Vercel in writing that Customer objects to Vercel's appointment of a new Subprocessor based on reasonable data protection concerns, the parties will discuss such concerns in good faith and whether they can be resolved.”

How does Vercel transfer personal data outside the EU?

Vercel's DPA relies on standard contractual clauses and adequacy decisions: “"Standard Contractual Clauses" means the 2021 Standard Contractual Clauses approved by the European Commission in decision 2021/914.”

When was Vercel's subprocessor list last checked?

ClauseTrail last checked Vercel's subprocessor list on September 26, 2026. Lists are re-checked daily.

How do I find out when Vercel adds or removes a subprocessor?

ClauseTrail monitors Vercel's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Vercel Subprocessors List (September 2026): Changes and History

Vercel names 28 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked September 26, 2026 Official source ↗

Vercel subprocessors (September 2026)

#	Subprocessor	Purpose	Location
1	Amazon Web Services (AWS)	Hosting, storage and generative AI services	United States
2	Google	Cloud computing, storage and generative AI services	United States
3	Microsoft	Hosting, storage and generative AI services	United States
4	Datadog	Cloud monitoring and security services	United States
5	Honeycomb	Real-time monitoring and debugging service	United States
6	Redis	Real-time logging and security services	United States
7	WorkOS	Audit log services	United States
8	Knock Labs	Customer notification services	United States
9	Salesforce	Customer relationship management (CRM) and support services	United States
10	Stripe	Payment processing services	United States
11	Tinybird	Analytics services	Spain
12	tray.io	Customer support process automation and productivity platform	United States
13	Twilio	Customer communication services	United States
14	Upstash	Serverless storage services	United States
15	Neon	Serverless storage services	United States
16	Kasada	Fraud prevention services	United States
17	Discourse	Community support and communication services	United States
18	ClickHouse	Analytics services	United States
19	OpenAI	Generative AI services	United States
20	Fireworks AI	Generative AI services and AI model inference services	United States
21	Anthropic	Generative AI services	United States
22	Exa.ai	AI search services	United States
23	Plain	Customer support services	United Kingdom
24	Groq	Generative AI services and AI model inference services	United States
25	Cerebras Systems Inc	Generative AI services and AI model inference services	United States
26	Baseten Labs Inc	Generative AI services and AI model inference services	United States
27	Invisible Tools Inc (dba Raindrop.ai)	AI monitoring and analytics services	United States
28	SpaceX	Generative AI services	United States

Get an email when Vercel changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Vercel free

AI and customer data at Vercel

What Vercel's own documents say, with the sentence each answer comes from.

Trains AI models on customer data: Yes, unless you opt out

“if you are on a Hobby plan or trial Pro plan, you agree that we may use Your Content to train our artificial intelligence ("AI") and machine learning models”
Terms of service, vercel.com ↗
Sends customer data to AI model providers: Yes

“we may share Your Content with third parties for the purpose of developing and improving their products, including training and improving their AI and machine learning models”
Terms of service, vercel.com ↗
How to opt out: Customers can opt out of Model Training at any time via their Team account settings, or by upgrading to an Enterprise plan where such processing does not apply.

“You may opt-out of Model Training at any time by adjusting your Team account settings or by upgrading to an Enterprise plan.”
Terms of service, vercel.com ↗

Key DPA terms at Vercel

What Vercel's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification: Without undue delay, with no set deadline

“upon becoming aware of a confirmed Security Incident, Vercel will notify Customer without undue delay unless prohibited by applicable law.”
DPA, vercel.com ↗
Notice of a new subprocessor: 5 days ahead

“If, within five (5) calendar days after such notice, Customer notifies Vercel in writing that Customer objects to Vercel's appointment of a new Subprocessor based on reasonable data protection concerns, the parties will discuss such concerns in good faith and whether they can be resolved.”
DPA, vercel.com ↗
Transfers outside the EU: Standard contractual clauses and adequacy decisions

“"Standard Contractual Clauses" means the 2021 Standard Contractual Clauses approved by the European Commission in decision 2021/914.”

“require any appointed Subprocessor to agree in writing to only process data in a country that the European Union has declared to have an "adequate" level of protection; or to only process data on terms equivalent to the Standard Contractual Clauses.”
DPA, vercel.com ↗
Customer data after the contract ends: Deleted or returned when the contract ends

“Termination or expiration of the Agreement serves as instruction for Vercel to delete all Customer Data within a commercially reasonable timeframe.”
DPA, vercel.com ↗
Audit rights: Through certifications and audit reports only

“Upon Customer's written request at reasonable intervals, and subject to reasonable confidentiality controls, Vercel will make available to Customer a copy of Vercel's most recent Audit Report.”
DPA, vercel.com ↗

Documents we track for Vercel

AI terms: checked September 26, 2026 vercel.com ↗
DPA: checked September 26, 2026 vercel.com ↗
Privacy policy: checked September 26, 2026 vercel.com ↗
Subprocessor list: checked September 26, 2026 security.vercel.com ↗
Terms of service: checked September 26, 2026 vercel.com ↗

Change history

Tracking since September 26, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.

Vercel subprocessors FAQ

How many subprocessors does Vercel use?: Vercel lists 28 subprocessors on its published list, including Amazon Web Services (AWS), Google, Microsoft, Datadog, and Honeycomb and 23 more.
Where does Vercel process customer data?: The subprocessors named by Vercel are located in United States, Spain, and United Kingdom, as stated on its list.
Does Vercel use customer data to train AI models?: According to its terms of service, Vercel uses customer data to train AI models unless customers opt out: “if you are on a Hobby plan or trial Pro plan, you agree that we may use Your Content to train our artificial intelligence ("AI") and machine learning models”
How quickly does Vercel report a personal data breach to customers?: According to its DPA, Vercel reports a personal data breach to customers without undue delay, with no set deadline: “upon becoming aware of a confirmed Security Incident, Vercel will notify Customer without undue delay unless prohibited by applicable law.”
How much notice does Vercel give before adding a subprocessor?: Vercel's DPA gives 5 days' notice of a new subprocessor, the time customers have to object: “If, within five (5) calendar days after such notice, Customer notifies Vercel in writing that Customer objects to Vercel's appointment of a new Subprocessor based on reasonable data protection concerns, the parties will discuss such concerns in good faith and whether they can be resolved.”
How does Vercel transfer personal data outside the EU?: Vercel's DPA relies on standard contractual clauses and adequacy decisions: “"Standard Contractual Clauses" means the 2021 Standard Contractual Clauses approved by the European Commission in decision 2021/914.”
When was Vercel's subprocessor list last checked?: ClauseTrail last checked Vercel's subprocessor list on September 26, 2026. Lists are re-checked daily.
How do I find out when Vercel adds or removes a subprocessor?: ClauseTrail monitors Vercel's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.