Vasthaul
Draft for review by counsel — not yet in force
Back to the site
Policies

Sub-processors

Everyone who touches a carrier’s data on Vasthaul’s behalf, where they are, and the one job each one does.

Last updated
2 September 2026

The list

  • Supabase
    Where
    Canada (ca-central-1)
    What it does for us
    The database, file storage and sign-in. This is where a carrier’s records and documents live.
  • Anthropic, or an OpenAI-compatible provider where a carrier has configured one
    Where
    United States
    What it does for us
    Reads rate confirmations, receipts and delivery paperwork into drafts that a person checks before anything is booked or paid.
  • Resend
    Where
    United States
    What it does for us
    Sends email: sign-in codes, invoices with their paperwork, settlement statements, the morning briefing.
  • Vercel
    Where
    United States
    What it does for us
    Hosts the office application and the driver app. Serves pages; holds no database of its own.
  • Stripe
    Where
    United States
    What it does for us
    Subscription billing for the carrier’s plan. Card numbers go to Stripe directly; we never see them.
  • Twilio
    Where
    United States
    What it does for us
    Text messages to drivers — load assigned, appointment reminders — only when a carrier turns SMS on.

Each provider is engaged under a written agreement that binds it to protections no weaker than our own, and is used only for the job named. The database and the files in it do not leave Canada; the providers in the United States receive what their job needs and no more.

When this list changes

A carrier is told thirty days before a provider is added, in the product and by email to the owner. A carrier that objects on reasonable grounds, and cannot be accommodated, may end its agreement without penalty. The date at the top of this page is the date it last changed.