Sub-processor List
Last updated: March 2026
Vile Analyziz uses the following third-party service providers (sub-processors) to deliver our services. This list is maintained as part of our commitment under our Data Processing Agreement.
We will notify customers at least 30 days before adding or replacing a sub-processor. You may subscribe to updates by contacting us.
Infrastructure Sub-processors
These sub-processors provide the core infrastructure on which Vile Analyziz operates.
| Provider | Purpose | Data Location |
|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure: compute, storage, database, networking, email delivery, identity management, content delivery | United States (us-east-1) |
| Stripe, Inc. | Payment processing, subscription billing, and invoice management | United States |
Customer-Controlled Integrations
The following services are not sub-processors in the GDPR sense because they are configured and controlled by the customer. Data is only sent to these services when the customer explicitly enables the integration and provides their own API credentials.
| Service | Purpose | How Data Flows |
|---|---|---|
| Threat intelligence providers | File reputation lookup and enrichment | File hash sent for lookup; file binary only if customer enables auto-submit |
| AI analysis providers | Enhanced file profiling and vendor intelligence | File metadata only (no binary content) sent using the customer's API key |
| Webhook / SIEM destinations | Event delivery to customer-configured endpoints | Analysis results sent to customer's own infrastructure |
Because these integrations use the customer's own API keys and are activated at the customer's discretion, the customer acts as the data controller for these data flows and is responsible for ensuring compliance with their own data protection obligations.
Change Notification
We will update this page and notify affected customers at least 30 days before adding a new infrastructure sub-processor. Customers who object to a new sub-processor may contact us within 15 days per the terms of our Data Processing Agreement.
Questions
For questions about our sub-processors or data processing practices, please visit our contact page.