Legal
Subprocessors
Last updated: August 29, 2026
Valibrio OÜ uses selected third-party service providers to operate Valibrio. Where a provider processes customer personal data on Valibrio's behalf in connection with the service, that provider may act as a subprocessor.
This page identifies the principal subprocessors used to provide Valibrio and describes the purpose for which they are used.
Supabase
Provider: Supabase
Purpose: Database infrastructure, authentication, application data storage, file storage, and related backend services.
Customer validation data, participant responses, account data, uploaded assets, and related application data may be processed through Supabase depending on the features used.
Vercel
Provider: Vercel Inc.
Purpose: Application hosting, deployment, delivery, and supporting infrastructure for the Valibrio web application.
Technical request data and application data necessary to serve and operate Valibrio may be processed through Vercel infrastructure.
OpenAI
Provider: OpenAI
Purpose: AI-assisted processing used to generate decision briefs and related AI-assisted results when those features are requested.
Relevant validation content and participant response content may be provided to OpenAI when a customer requests an AI-assisted feature.
Resend
Provider: Plus Five Five, Inc. (Resend)
Purpose: Transactional email delivery.
Recipient email addresses and transactional email content may be processed through Resend when Valibrio sends service-related emails.
Stripe
Provider: Stripe
Purpose: Subscription checkout, payment processing, billing, invoices, and subscription management.
Account and transaction information necessary to provide paid subscriptions may be processed through Stripe. Payment card details are handled directly by Stripe rather than stored by Valibrio.
PostHog
Provider: PostHog
Purpose: Optional product analytics used to understand how Valibrio is used and improve the service.
Analytics data is sent to PostHog only where the applicable analytics consent requirements have been satisfied. Users can withdraw analytics consent through Valibrio's cookie settings.
International processing
Some subprocessors or their supporting infrastructure may process personal data outside the European Economic Area. Where applicable data-protection law requires safeguards for an international transfer, Valibrio relies on appropriate transfer mechanisms and contractual protections provided through its agreements with the relevant service providers.
Changes to subprocessors
Valibrio may update this list when service providers are added, replaced, or no longer used. The current version of this page identifies the subprocessors used by Valibrio at the date shown above.
Customers with questions or reasonable data-protection concerns about a subprocessor change can contact Valibrio at privacy@valibrio.com.
Related information
Valibrio's processor obligations are described in the Data Processing Agreement. Additional information about Valibrio's handling of personal data is available in the Privacy Policy.