Vendor record · vercel.com
What Vercel promises about your data.
Where Vercel publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.
- Where it publishes
Vercel lists its sub-processors at security.vercel.com/subprocessors. We last read it on October 15, 2026.
- What has changed
We've recorded no change to its sub-processor list or data processing agreement between August 31, 2026 and September 15, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.
- Its window
When it adds a sub-processor, its clause at vercel.com/legal/dpa (read October 7, 2026) gives you 5 days to object.
- Window
- 5
- Sub-processors
- 27
- Pages
- 8
- Copies
- 77
days to object when it adds a sub-processor
sub-processors named
pages we watch
dated copies of all its pages, since August 31, 2026
Vercel DPA
Vercel's data processing agreement gives 5 days to object to a new sub-processor. Here is the clause, from our October 7, 2026 copy:
5
days to object
“If, within five (5) calendar days after such notice, Customer notifies Vercel in writing that Customer objects to Vercel's appointment of a new Subprocessor based on reasonable data protection concerns, the parties will discuss such concerns in good faith and whether they can be resolved.”
Found automatically and not yet checked by a person. The quote is exact, and the link goes to the source. Nothing here says whether the term is good or bad, only that Vercel published it.
vercel.com/legal/dpa · read 2026-10-07 · fingerprint 077d5502ede8554d…
How it says it sends notice
“Vercel will notify Customer by updating the list of Subprocessors and, if Customer has subscribed to notices as set forth in the preceding sentence.”
vercel.com/legal/dpa · read 2026-10-07
Vercel sub-processors
Vercel publishes a sub-processor list at security.vercel.com/subprocessors; we last read it on October 15, 2026. It names 27 entries. The first 15, as the list prints them: Anthropic; Baseten Labs Inc; Cerebras Systems Inc; ClickHouse; Datadog; Discourse; Exa.ai; Fireworks AI; Google; Groq; Honeycomb; Invisible Tools Inc (dba Raindrop.ai); Kasada; Knock Labs; Microsoft; and 12 more in the full table below. The public record holds no change to the list read before September 15, 2026. A change we read after September 15, 2026 is published 30 days after we read it.
27 named · full table
Every public change we have recorded · Where vendors publish their lists
How long Vercel keeps your data
We hold no statement about data retention from Vercel's watched pages. The pages we watch: changelog vercel.com/changelog; deprecation schedule vercel.com/deprecations; data processing agreement vercel.com/legal/dpa; pricing page vercel.com/pricing; privacy policy vercel.com/privacy; status page vercel.com/status; sub-processor list security.vercel.com/subprocessors; terms of service vercel.com/terms. On training with customer data, Vercel's data processing agreement (vercel.com/legal/dpa, in the copy read October 7, 2026) says: “Processing Activities - Customer Data. Customer Data will be subject to the following basic processing activities: the provision of Services and disclosures in accordance with the Agreement and/or as compelled by applicable laws. - Service-Generated Data and Contact Data. Personal Data contained in Service-Generated Data and/or Contact Data will be subject to the following processing acti…”
Training on customer data
“We may combine usage information with feedback to improve our Services or inform Customers about products that may be relevant to them. ## How We Use Information We use your information as described in this Notice to provide our Sites and Services.”
vercel.com/privacy · read 2026-10-07
Training on customer data
“By submitting Your Content on or through the Services, you grant Vercel a worldwide, non-exclusive, royalty-free, fully paid, sublicensable and transferable license to use, copy, modify, adapt, reproduce, distribute, display, publish, store, perform, and create derivatives of Your Content to provide and improve the Services, develop new products and services, secure and protect the Services and t…”
vercel.com/terms · read 2026-10-07
Retention windows vendors publish · What vendors say about training
What the pages say
Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.
Sub-processors named · 27 · 6 name an AI provider we list
AnthropicAI · Anthropic
Generative AI services
United States
Baseten Labs IncAI · Baseten
Generative AI services and AI model inference services
United States
Cerebras Systems IncAI · Cerebras
Generative AI services and AI model inference services
United States
ClickHouse
Analytics services
United States
Datadog
Cloud monitoring and security services
United States
Discourse
Community support and communication services
United States
Exa.ai
AI search services
United States
Fireworks AIAI · Fireworks AI
Generative AI services and AI model inference services
United States
Cloud computing, storage and generative AI services
United States
GroqAI · Groq
Generative AI services and AI model inference services
United States
Honeycomb
Real-time monitoring and debugging service
United States
Invisible Tools Inc (dba Raindrop.ai)
AI monitoring and analytics services
United States
Kasada
Fraud prevention services
United States
Knock Labs
Customer notification services
United States
Microsoft
Hosting, storage and generative AI services
United States
Neon
Serverless storage services
United States
OpenAIAI · OpenAI
Generative AI services
United States
Plain
Customer support services
United Kingdom
Redis
Real-time logging and security services
United States
Salesforce
Customer relationship management (CRM) and support services
United States
SpaceX
Generative AI services
United States
Stripe
Payment processing services
United States
Tinybird
Analytics services
Spain
tray.io
Customer support process automation and productivity platform
United States
Twilio
Customer communication services
United States
Upstash
Serverless storage services
United States
WorkOS
Audit log services
United States
The pages' own stamps: Effective Date 2026-03-31 · Effective Date 2026-06-01 · Last Updated 2026-03-17 · Last Updated 2026-06-01 · Last Updated 2026-06-01
The pages we watch
Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.
Where we get nothing
What Vercel does not publish where we can read it
Of the 8 public pages we watch for Vercel, these give us nothing right now.
Model or system card
the page at that URL is not that document
vercel.com/modelsTrust and security
the page at that URL is not that document
vercel.com/trustBefore you conclude anything
This only means we couldn’t read it on a public page. Vercel may share it in its agreement, a trust portal, or with any customer who asks.
So treat it as a question to ask them: “Can you send your sub-processor list, and tell us when it changes?”
What this page doesn’t tell you
No score.
Nothing here rates Vercel. A short notice window is a contract term, not a criticism.
Public pages only.
Private notices and negotiated terms are invisible to us. Your agreement may say something different.
Wrong? Tell us.
Corrections are free, always. We reply within 2–3 business days.
How we read a page · The change log
Work at Vercel? With an email at vercel.com you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.
Is Vercel in your product? Hear the morning we read a change.
You get the lines that moved, in Vercel’s own words, and the date any window closes. No card. Nothing to cancel.