Subprocessors

A subprocessor is a third-party service we use to operate MyVA. They process personal data on our behalf under contractual terms that protect your data and limit their use to what's necessary to deliver the service.

This page lists every subprocessor in production today, what they do, and where to find their own privacy practices. When we add, change, or remove a subprocessor, we update this page and bump the “Last updated” date at the top.

• Vercel, Inc. — Application hosting and basic usage analytics. United States. Privacy policy
• Supabase, Inc. — Database, file storage, and realtime features. United States. Privacy policy
• Resend, Inc. — Transactional email delivery (when sent under MyVA's key; customers may also bring their own provider). United States. Privacy policy
• OpenAI, L.L.C. — Powers the VAI copilot. Customers bring their own API key per project; prompts go directly to OpenAI under their terms. United States. Privacy policy
• Stripe, Inc. — Planned for paid subscriptions and contractor disbursements. Not active for billing as of the “Last updated” date. United States. Privacy policy
• Twilio Inc. — SMS and voice communications provider. Used when a project owner configures SMS for their project; messages are sent through Twilio under the project owner's own Twilio account credentials. United States. Privacy policy
• Prisma Data, Inc. (Accelerate) — Database query acceleration and connection pooling on top of our Supabase Postgres database. United States. Privacy policy
• Sentry (Functional Software, Inc.) — Application error tracking and performance monitoring. United States. Privacy policy

When we add, replace, or remove a subprocessor we update this page and bump the “Last updated” date at the top. If you'd like to be notified of changes proactively, email yourva@myva.cc with the subject “Subprocessor Updates” and we'll add you to the notification list.

Questions about our subprocessors: yourva@myva.cc