Vendor record · vespa.ai
What Vespa promises about your data.
Where Vespa publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.
- Where it publishes
Vespa lists its sub-processors at trust.vespa.ai/subprocessors. We last read it on October 11, 2026.
- What has changed
We've recorded no change to its sub-processor list or data processing agreement between August 31, 2026 and September 15, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.
- Its window
When it adds a sub-processor, its clause at vespa.ai/data-processing-agreement (read October 7, 2026) gives you 10 days' notice and 10 to object.
- Window
- 10
- Sub-processors
- 6
- Pages
- 6
- Copies
- 17
days' notice and 10 to object when it adds a sub-processor
sub-processors named
pages we watch
dated copies of all its pages, since August 31, 2026
Vespa DPA
Vespa's data processing agreement states a window of 10 days on new sub-processors. Here is the clause, from our October 7, 2026 copy:
10
days' notice and 10 to object
“At least ten (10) days before enabling any new Sub-Processors the new Sub-Processor will be added to the List. The Customer may object to such an engagement by informing Vespa.ai within this ten (10) day period, provided such objection is in writing and based on reasonable grounds relating to data protection.”
Found automatically and not yet checked by a person. The quote is exact, and the link goes to the source. Nothing here says whether the term is good or bad, only that Vespa published it.
vespa.ai/data-processing-agreement · read 2026-10-07 · fingerprint 5158cfb7de276e86…
Vespa sub-processors
Vespa publishes a sub-processor list at trust.vespa.ai/subprocessors; we last read it on October 11, 2026. It names 6 entries. The entries, as the list prints them: Amazon Web Services; Auth0; GitHub; Google Cloud Platform; Google Workspace; JumpCloud. The same list is in the full table below. The public record holds no change to the list read before September 15, 2026. A change we read after September 15, 2026 is published 30 days after we read it.
6 named · full table
Every public change we have recorded · Where vendors publish their lists
How long Vespa keeps your data
We hold no statement about data retention from Vespa's watched pages. The pages we watch: data processing agreement vespa.ai/data-processing-agreement; pricing page vespa.ai/pricing; privacy policy vespa.ai/privacy; sub-processor list trust.vespa.ai/subprocessors; terms of service vespa.ai/product-terms/; trust and security page trust.vespa.ai/. On training with customer data, Vespa's privacy policy (vespa.ai/privacy, in the copy read October 7, 2026) says: “We collect this information to uphold our legitimate interests in being able to display our website to you, measuring and improving the performance of our digital channels, as well as marketing our products and services (ref.”
Retention windows vendors publish · What vendors say about training
What the pages say
Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.
Sub-processors named · 6
Amazon Web Services
Cloud provider
Auth0
External user identity management
GitHub
Version control
Google Cloud Platform
Cloud provider
Google Workspace
Collaboration suite
JumpCloud
Identity and IT asset management
Certifications the trust page names · SOC 2 · SOC 2 Type II · SOC 3
Laws the trust page names · GDPR
The pages we watch
Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.
What this page doesn’t tell you
No score.
Nothing here rates Vespa. A short notice window is a contract term, not a criticism.
Public pages only.
Private notices and negotiated terms are invisible to us. Your agreement may say something different.
Wrong? Tell us.
Corrections are free, always. We reply within 2–3 business days.
How we read a page · The change log
Work at Vespa? With an email at vespa.ai you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.
Is Vespa in your product? Hear the morning we read a change.
You get the lines that moved, in Vespa’s own words, and the date any window closes. No card. Nothing to cancel.