Subprocessors
Vinculum uses a small number of third-party services to run the hosted product. This page lists every sub-processor we use, what they handle, and where they are based.
Current subprocessors
| Processor | Purpose | Location |
|---|---|---|
| OVH | Bare-metal server hosting for the application and primary database | Hillsboro, Oregon, USA |
| OVH Object Storage | Encrypted nightly backups and uploaded media | USA (US-East, Virginia) |
| Anthropic | LLM API — thread title generation, delta classification, entry summaries, where those features are active | USA |
| Stripe | Payment processing and subscription management | USA |
| Cloudflare | DNS only | USA / global |
What each processor receives
OVH is the physical home of the Postgres database and application server, in Hillsboro, Oregon. The database volume is encrypted at rest (LUKS), and database connections require application credentials.
OVH Object Storage holds nightly backups and uploaded media. Backups are encrypted on our server (restic) before upload, so OVH stores only ciphertext.
Anthropic receives the text of entries we pass for summarization or classification, only for entries where those features are active. Under Anthropic's commercial API terms, content is not used for model training.
Stripe receives your billing identity and manages payment instrument tokenization. We never see your card number; it is entered into a Stripe-hosted iframe and never touches our servers.
Cloudflare provides DNS for vinculum.run. Traffic is not proxied through Cloudflare; TLS terminates on our own server.
Transactional email (receipts, security notices, service alerts) is sent by Stalwart, which we run on our own server. It is software we operate, not a third party. We do not send marketing email through this channel.
Self-hosted instances
If you self-host Vinculum from the open-source repository, none of the above necessarily apply. You choose which integrations to enable via environment variables. Anthropic features no-op cleanly if the API key is not configured.
Changes to this list
We will update this page when we add or remove a subprocessor. Material changes — adding any processor that receives content or account data — will be announced via in-product notice and email at least 14 days in advance.