Subprocessors
Vendors we use to deliver Valtik Studios services. This list is kept current and available for enterprise procurement review. Last updated 2026-04-17.
| Vendor | Purpose | Data Handled | Location | Certs |
|---|---|---|---|---|
| Vercel | Website hosting + edge middleware + analytics | Public website traffic, free-check form submissions (non-PII until user submits) | US (multiple regions) | SOC 2 Type II, ISO 27001 |
| Cloudflare | DNS, DDoS mitigation, Turnstile bot protection, Zero Trust access to VPS | Network metadata, bot signals, IP addresses (in log form) | Global (US + EU edge nodes) | SOC 2 Type II, ISO 27001, FedRAMP |
| Hetzner Online | Dedicated VPS hosting for scan.valtikstudios.com webhook pipeline | Free-check scan requests (domain, name, email), scan results, log files | US (Ashburn, VA) | ISO 27001, DIN ISO/IEC 27001 |
| Resend | Transactional email delivery (signup confirmations, free-check reports, newsletters) | Recipient email addresses, message content | US (AWS SES relay) | SOC 2 Type II |
| Google Workspace | Business email (role-based mailboxes, aliases), calendar, document collaboration | Email content for role mailboxes (hello@, security@, support@, etc.), calendar invites, internal docs | US (multi-region) | SOC 2 Type II, ISO 27001, ISO 27017, ISO 27018, FedRAMP |
| IONOS | Domain registrar + DNS for valtikstudios.com | WHOIS data (privacy-masked), DNS queries metadata | US / EU | ISO 27001, TIA-942 Rated-3 |
| Tailscale | Zero-trust VPN for secure access to VPS infrastructure | Device identities, connection metadata (no traffic content) | US (control plane), P2P for data plane | SOC 2 Type II |
| GitHub (Microsoft) | Source code hosting for website | Public website source code (no client data) | US | SOC 2 Type II, ISO 27001, FedRAMP |
| Anthropic | Claude API for select internal workflow automation (not exposed to clients) | Internal operational prompts only. Client engagement data is never sent to third-party AI providers without prior written authorization. | US | SOC 2 Type II |
| Let's Encrypt (ISRG) | TLS certificate issuance for valtikstudios.com and scan.valtikstudios.com | Domain names only (public information) | US | WebTrust for CA |
Notification of changes
Material changes to this subprocessor list are communicated to active clients at least 30 days before they take effect. Clients engaged under a Data Processing Agreement (DPA) may object in writing; Valtik will work in good faith to identify alternative subprocessors or scope the engagement to exclude the objected vendor.
Non-material changes (for example, a vendor adding a new region within the same jurisdiction) are updated here without prior notice but reflected with an updated "Last updated" date at the top of this page.
Questions or objections
Email hello@valtikstudios.com with subject line "Subprocessor Review" and we will respond within one business day.