Spokesperson list
Vahti uses selected sub-processors to provide services such as infrastructure, payments, email delivery and customer communications. We publish an up-to-date list of sub-providers and update it as necessary. We will endeavour to notify customers of significant new sub-processors at least 30 days in advance.
Updated 23.4.2026
Spokespersons
Last updated: 24.4.2026
On this page, we describe the sub-providers that Vahti Service Oy uses to provide the vahti.ai service.
A sub-processor is a service provider who processes personal data on behalf of Vahti Service Oy, for example in connection with the technical implementation of the service, billing, e-mail delivery or customer communication.
Not all of the below mentioned actors process the actual service data from the customer's Microsoft 365 environment. Some of them primarily process their own customer relationship, billing, communication or website data.
| Service provider | Purpose | Nature of the data processed | Location / data residency | Further information |
|---|---|---|---|---|
| Google Cloud / Google Cloud EMEA Limited | Infrastructure, hosting, database, logging and technical service management. In addition, Google Vertex AI / Gemini may process data to explain findings and provide guidance. | Client and user account data, service technical data, log data and data derived from the Microsoft 365 environment necessary to run the service. | The main production infrastructure of Vaht is located in the EU, primarily in the europe-north1 region. Vertex AI / Gemini will be configured for use in the EU. | The Google Cloud contract partner for Vaht is Google Cloud EMEA Limited. |
| Stripe / Stripe Payments Europe, Limited and Stripe Technology Europe, Limited | Payments, orders, billing and transaction processing. | Customer billing information, contact information, transaction information, order and payment status information and technical identification information of the payment method. | Stripe operates in the EEA through Irish Stripe companies, but may involve processing or access outside the EU/EEA. | By default, Stripe does not process customer Microsoft 365 tenant data. Stripe's DPA compliant mechanisms, such as the EU-U.S. Data Privacy Framework and/or EU Standard Contractual Clauses, will be used as the basis for transfer. |
| Postmark / AC PM, LLC | Delivery of emails, such as system messages, invitations, notifications and other messages necessary for the use of the service. | Recipient's email address, name, company, message content, transmission and delivery logs, and technical metadata of the message. | United States/possible processing outside the EU/EEA. | Postmark is not used for payment processing or as an actual repository of customer data. The transfer bases are Postmark's DPA compliant mechanisms, such as the EU-U.S. Data Privacy Framework and/or the EU Standard Contractual Clauses. |
| HubSpot / HubSpot Ireland Limited | Website forms, lead and demo request processing, CRM, sales and customer communications. | Contact name, email address, phone number, title, company, contact content, customer relationship and sales process information, website and form specifications. | The HubSpot account is in the EU1 environment. HubSpot's service may still involve processing or access outside the EU/EEA. | HubSpot primarily processes website, sales and customer relationship data, not actual Microsoft 365 tenant data. The transfer basis will be based on HubSpot's DPA compliant mechanisms, such as the EU Standard Contractual Clauses and/or other applicable transfer mechanisms. |
Changes to sub-processors
Vahti Service Ltd may update this list if the sub-processors used to provide the service change.
If we introduce a new material sub-processor that processes customer personal data on behalf of Vahti, we will endeavour to notify customers of the change at least 30 days before the change takes effect, unless the change is urgent for reasons such as security, availability or legal requirements.
The customer may make a reasonable privacy-related objection to the new sub-processor as described in the data processing agreement with Vaht.
Other data protection documents
For more information on the processing of personal data, please consult the following documents:
Questions
Questions regarding subprocessors can be sent to:
For data protection issues, please contact:
Teemu Tapper
teemu@vahti.ai