Sub-processors
Last updated: 30 October 2026.
Vechtron is operated by BlackFortz Capital Ltd (trading as Vechtron), company 16153268, registered at Unit F Winston Business Park, Churchill Way, Chapeltown, Sheffield, S35 2PS, United Kingdom.
To deliver the Service we rely on a small set of carefully chosen third-party sub-processors. Each one has been selected for a specific operational need, is bound by a data-processing agreement with us, and processes personal data only on our documented instructions.
If a customer has signed our Data Processing Agreement, this page forms part of it.
Current sub-processors
| Sub-processor | Purpose | Processing location | Transfer safeguard |
|---|---|---|---|
| Hetzner / Contabo | Primary application + database hosting (VPS in Nuremberg / Düsseldorf, Germany) | 🇩🇪 Germany (EU) | N/A — EU-based |
| Google Workspace | Transactional email delivery (@vechtron.com addresses, password resets, invoices, approvals) | 🇺🇸 USA | EU-US Data Privacy Framework + SCCs |
| Termii | SMS delivery for driver SOS alerts + two-factor auth to Nigerian numbers | 🇳🇬 Nigeria | NDPR adequacy + SCCs |
| Paddle | Payments / recurring subscriptions (Merchant of Record — see Terms § 5) | 🇬🇧 UK / 🇺🇸 USA | UK IDTA + SCCs (where applicable) |
| GitHub (Microsoft) | Source-code hosting + CI/CD pipelines (no customer data processed — operational only) | 🇺🇸 USA | EU-US Data Privacy Framework + SCCs |
| Let's Encrypt / ISRG | TLS certificate issuance | 🇺🇸 USA | Public-key issuance only; no personal data transferred |
What they can see
- Hetzner / Contabo hold the live database (encrypted at rest), application logs, and backups. All personal data in the Service transits them.
- Google Workspace receives email addresses + email body contents only when we send transactional email to a user. No telemetry, vehicle or driver data is sent.
- Termii receives Nigerian phone numbers + short message bodies ("Driver John triggered SOS at 06:14 — Lagos") when an SOS or 2FA event fires. No telemetry streams.
- Paddle receives only payment-related data — buyer name, email, billing address, card details (which they handle directly; we don't store them). No vehicle, telemetry, or fleet data.
- GitHub receives no customer production data. It stores our source code, which contains no customer data.
- Let's Encrypt receives nothing beyond the public DNS name being certified.
Not sub-processors (clarification)
- Analytics — we run self-hosted Plausible-equivalent, no Google Analytics, no Facebook pixel, no third-party trackers.
- Error monitoring — self-hosted on the same VPS, no Sentry / Datadog / Rollbar.
- AI assistant — the in-app assistant runs on model APIs we invoke server-side with per-request data minimisation; model providers are not storage sub-processors. Model API choice is listed in our Terms of Service and may change with notice.
Change notice
We give 30 days' advance notice before adding, removing or materially changing a sub-processor. Notice is given by:
- Updating this page (always the authoritative source), AND
- Emailing the designated data-protection contact at every active customer organization, AND
- Posting the change at the top of this page under "Recent changes" below.
If you want to be notified by RSS or a webhook when this page changes, email privacy@vechtron.com.
Objection
Under our Data Processing Agreement, a customer may object to a new sub-processor within 30 days of notice on reasonable grounds (e.g. the sub-processor is in a jurisdiction incompatible with their regulatory obligations). We will work with you to find an acceptable alternative. If none is possible, you may terminate the affected portion of the Service for a pro-rated refund as described in our Refund Policy.
Recent changes
- 30 October 2026 — Initial list published; Paddle added as Merchant of Record pending final approval of our account.
Contact
Questions on this list, or to request a copy of a sub-processor's current DPA / SOC 2 report (where applicable):
privacy@vechtron.com
BlackFortz Capital Ltd (trading as Vechtron)
Unit F Winston Business Park, Churchill Way, Chapeltown, Sheffield, S35 2PS, United Kingdom
Company number: 16153268