Subprocessors

Effective: 24 July 2026 Last reviewed: 24 July 2026

To run VanVox, VANVOX LTD relies on a small number of trusted service providers — sometimes called subprocessors — that process information on our behalf. This page lists the providers whose involvement we can confirm from our own records, explains what each is used for, and is honest about the details we are still verifying.

This register works alongside our Privacy Notice, which explains what information we process, why, and your rights. Our Contact page lists the privacy and security reporting routes. Where the specific provider or the region it operates in depends on how the service is deployed, we use category wording and say so, rather than naming a company or place we cannot yet confirm.

Providers we can confirm

These providers are part of how the core service works, and we can confirm their involvement from our own records.

OpenAI

AI transcription and extraction

What it is used for: Transcribing voice notes into text and extracting structured draft details (such as amounts, dates and line items) from your messages and receipts.
Information involved: Voice-note audio, transcript text, typed message text and receipt content submitted for a draft.
Processing location and safeguards: This provider may process information outside the United Kingdom. We are verifying the specific region and the transfer safeguard that applies, and will state it here once confirmed. Until then we do not claim a specific country, region or safeguard we cannot evidence from our own records.

Infrastructure providers

The service also depends on infrastructure providers for hosting, storage, email and backups. The specific company, and the region it operates in, depend on how the service is deployed. Rather than name a provider or place we cannot yet confirm, we describe each category and are clear about what is still being verified.

Hosting and object storage

What it is used for: Running the service and holding files such as receipts, transcripts and generated PDFs.
Status: The specific provider and processing region depend on our deployment configuration and are being verified before we name them here.

Email delivery

What it is used for: Sending transactional emails such as password-reset and email-verification messages.
Status: The specific email provider depends on our deployment configuration and is being verified before we name it here.

Error monitoring

What it is used for: Helping us detect and fix faults. We scrub personal details from these reports before they are sent.
Status: Whether error monitoring is active and where its data resides depend on our deployment configuration and are being verified.

Backups

What it is used for: Keeping secure copies of our database for disaster recovery.
Status: The backup provider and its region depend on our deployment configuration and are being verified before we name them here.

International processing

Some of the providers above may process information outside the United Kingdom. We are verifying exactly where each provider processes information and which transfer safeguards apply. Until that verification is complete, we have chosen not to name a specific country, region or safeguard that we cannot confirm from our own records, and we do not claim that any provider processes information only in the United Kingdom.

How we communicate changes

We may add, remove or change subprocessors as the service develops. When we make a material change to this register, we will update the effective and last-reviewed dates at the top of this page and, where appropriate, let business users know through the service. We encourage you to review this page occasionally.

Contact

VanVox is operated by VANVOX LTD (company number 17225704), registered in England and Wales. For any question about this register or your privacy, email privacy@vanvox.co.uk. For security reports or formal notices, use the Contact page.

For the full picture of how we handle information, please read our Privacy Notice.