Sub-processors List
Last updated: February 20, 2026
1. Introduction
VynCo engages the following sub-processors to deliver its services. This list is maintained per our Data Processing Agreement, in accordance with GDPR Article 28 requirements and the Swiss Federal Data Protection Act (nDSG). We notify customers of changes to this list 30 days in advance.
In addition to these sub-processors, VynCo sources company information from official Swiss government open data sources: Zefix (Swiss Commercial Register) and LINDAS (Linked Data Service). These sources are maintained by the Federal Office of Justice and Federal Statistical Office respectively, and the data is published under open licenses.
2. Infrastructure Sub-processors
| Sub-processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Microsoft Azure | Cloud infrastructure, compute, storage | All service data | United States (East US 2), Europe (West Europe) |
| Microsoft Entra External ID | Identity and authentication | User credentials, profile data | United States |
| Azure Cache for Redis | Session caching, rate limiting | Session tokens, usage counters | United States (East US 2) |
| Azure Service Bus | Async job processing | Job metadata, generation parameters | United States (East US 2) |
3. Payment Sub-processors
| Sub-processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Stripe | Payment processing, billing | Payment card details, billing address, invoice data | United States, Europe |
4. Communication Sub-processors
| Sub-processor | Purpose | Data Processed | Location |
|---|---|---|---|
| SendGrid (Twilio) | Transactional email | Email addresses, notification content | United States |
5. Monitoring Sub-processors
| Sub-processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Datadog | Application monitoring, logging | Anonymized telemetry, error logs | United States, Europe |
6. Content Delivery
| Sub-processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Cloudflare | CDN, DDoS protection | IP addresses, request metadata | Global (edge network) |
7. Changes to Sub-processors
VynCo will notify customers of any intended changes to this sub-processors list through the following process:
- 30-day advance notice via email to the account administrator before any new sub-processor is engaged or an existing sub-processor is replaced.
- Updates posted to this page with a revision date reflecting the most recent change.
- Customer objection rights — customers may object to a new sub-processor per the terms of the Data Processing Agreement. If a reasonable objection cannot be resolved, the customer may terminate the affected services without penalty.
- Subscribe to updates — send an email to dpa-updates@vynco.ch to be notified of future changes to this list.
Questions?
For questions about this sub-processors list or our data processing practices, contact: dpa@vynco.ch
See also: Data Processing Agreement | Privacy Policy | Terms of Service