Subprocessors
Vinculum uses a small number of third-party services to run the hosted product. This page lists every sub-processor we use, what they handle, and where they are based.
Current subprocessors
| Processor | Purpose | Location |
|---|---|---|
| OVH | Bare-metal server hosting for the application and primary database | France (EU) |
| Anthropic | LLM API — thread title generation, delta classification, entry summaries (Pro/Team tier only) | USA |
| Voyage AI | Embedding API — vector embeddings for semantic search and clustering (Pro/Team tier only) | USA |
| Stripe | Payment processing and subscription management | USA |
| Cloudflare | CDN, edge TLS termination, DNS, and encrypted off-box backup storage (R2) | USA / global edge |
| Stalwart | Transactional email — account notices, security alerts, billing receipts | USA |
What each processor receives
OVH is the physical home of the Postgres database and application server. OVH staff cannot read application data without compromising the encryption layer — database connections require application credentials; disk encryption is enforced at the host level.
Anthropic receives the text of entries we pass for summarization or classification — only on the Pro/Team tier and only for entries where those features are active. Under Anthropic's commercial API terms, content is not used for model training.
Voyage AI receives entry text for generating vector embeddings — again, only on Pro/Team. Voyage AI's commercial terms prohibit using customer content for training purposes.
Stripe receives your billing identity and manages payment instrument tokenization. We never see your card number; it is entered into a Stripe-hosted iframe and never touches our servers.
Cloudflare terminates TLS at the edge and routes traffic to our origin server. Database backups are stored on Cloudflare R2 in encrypted form (age encryption; Cloudflare sees only ciphertext).
Stalwart handles transactional email only: receipts, security notices, and service alerts. We do not send marketing email through this channel.
Self-hosted instances
If you self-host Vinculum from the open-source repository, none of the above necessarily apply. You choose which integrations to enable via environment variables. Voyage AI and Anthropic features no-op cleanly if their API keys are not configured.
Changes to this list
We will update this page when we add or remove a subprocessor. Material changes — adding any processor that receives content or account data — will be announced via in-product notice and email at least 14 days in advance.
Privacy policies
- OVH Privacy Policy
- Anthropic Privacy Policy
- Voyage AI Privacy Policy
- Stripe Privacy Policy
- Cloudflare Privacy Policy