Sub-processor List
Version 1.1Effective: 1 March 2026Last updated: 1 May 2026
This page lists the third-party sub-processors that Vantemo (Inovacijų dialogas, MB) engages to process personal data on behalf of merchants in connection with the Vantemo platform. It is maintained in accordance with Article 5 of our Data Processing Agreement.
Merchants who have accepted the DPA are deemed to have granted general authorisation to the sub-processors listed below as of the DPA effective date. Where a new sub-processor is added or an existing one materially changed, merchants will receive at least 30 days' advance notice and may object in accordance with DPA Art. 5.3.
Current Sub-processors
| Sub-processor | Country | Purpose | Transfer mechanism |
|---|---|---|---|
| Stripe Inc. | USA | Payment processing infrastructure (merchant payouts via Stripe Connect) | EU-US Data Privacy Framework + Standard Contractual Clauses |
| Amazon Web Services — Simple Email Service (SES) | Sweden / EU (eu-north-1) | Transactional and marketing email delivery on behalf of merchants. Processes recipient email addresses, email content, and bounce/complaint events. Data is processed in the AWS eu-north-1 region (Stockholm, Sweden) — no transfer outside the EEA. | EU-based processing; no international transfer required |
| Amazon Web Services — SNS / SQS | Sweden / EU (eu-north-1) | Message queue for SES bounce/complaint event notifications. Routes delivery events (bounce type, complaint reason) from SES to Vantemo's processing pipeline. No email body content is stored in SQS. | EU-based processing; no international transfer required |
| Cloudflare Inc. | USA | Content delivery network, DDoS protection, SSL termination, and DNS management. For email: Cloudflare manages DNS records for the send.vantemo.com sending zone (DKIM CNAME records, SPF, DMARC). Cloudflare does not process email content or recipient addresses. | EU-US Data Privacy Framework + Standard Contractual Clauses |
| PostHog Inc. | USA | Platform-level product analytics (admin dashboard usage — not end-customer storefront data) | Standard Contractual Clauses |
| Hostinger | Lithuania / EU | VPS infrastructure — primary data hosting for all platform data | EU-based; no international transfer |
Change History
| Date | Change |
|---|---|
| 1 May 2026 | v1.1 — Updated AWS SES entry to specify eu-north-1 (Stockholm) region and clarify no EEA transfer. Added AWS SNS/SQS entry. Updated Cloudflare entry to include DNS/email role for send.vantemo.com zone. |
| 1 March 2026 | Initial list published (v1.0) |
Questions
To object to a sub-processor or request further information about our data transfers, contact [email protected].