Subprocessors
Last updated: October 1, 2026
To provide the Valarn service we engage the third-party subprocessors below. Each processes personal data only on our documented instructions and under a data protection agreement. This list is the current set of subprocessors; we will update this page and, where required, notify customers before engaging a new one.
| Subprocessor | Purpose | Data processed | Region |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting, database, and file storage; backup AI model hosting (Amazon Bedrock, US regions) | All service data (encrypted at rest); report inputs and prompts when Bedrock serves an AI call | United States |
| Clerk | Authentication and account management | Email, name, authentication identifiers | United States |
| Stripe | Payments and subscription billing | Billing contact, payment metadata (card data handled by Stripe, never by Valarn) | United States |
| OpenAI | AI research generation and content translation | Report inputs and prompts (not account credentials) | United States |
| Anthropic | AI research generation and compliance review | Report inputs and prompts | United States |
| Google (Gemini) | AI research generation (optional provider) | Report inputs and prompts | United States |
| DeepSeek | AI research generation (optional provider) | Report inputs and prompts | United States |
| xAI (Grok) | AI research generation (optional provider) | Report inputs and prompts | United States |
| Cheaper Inference | AI research generation (optional provider) — an inference marketplace that routes requests to the model providers listed above | Report inputs and prompts | United States |
| OpenRouter, Inc. | AI research generation (optional provider) — an inference marketplace used for failover routing to the model providers listed above | Report inputs and prompts | United States |
| Brevo (Sendinblue) | Transactional and marketing email delivery | Email address, name, engagement events | European Union |
| Financial Modeling Prep (FMP) | Market and reference data | Ticker queries (no personal data) | United States |
| Massive (Polygon.io) | Options and equity market data (options chains, Greeks, open interest, trade prints, price bars) — 15-minute delayed | Ticker and option-contract queries (no personal data) | United States |
| Chatwoot | Live customer support chat (when you use support) | Name, email, and plan when you engage support | Self-hosted (United States) |
| Plaid | Brokerage account connection (only if you connect one) | Brokerage credentials handled by Plaid; Valarn receives holdings, never your login | United States |
| PostHog | Product analytics, session replay and in-app surveys (only with your Analytics consent) | Pseudonymous usage events, device and browser metadata, IP-derived approximate location, and session recordings in which all text and form inputs are masked. Never records the pages showing your holdings, reports or billing. | United States |
| KLIPY | GIF search and GIF reactions on public research (only when you view or add GIF reactions) | GIF search terms (sent by Valarn, not by your browser, and without your account details); your IP address and browser details when GIF images load from KLIPY | United States |
| Sentry (Functional Software, Inc.) | Error and performance monitoring for the website and app | Error reports and technical diagnostics: the page and browser involved, device metadata and IP address | United States |
| Cloudflare (Turnstile) | Bot and abuse protection on sign-up, contact and download forms | IP address and browser and device signals used to tell people from bots | United States and global network |
| CARTO | Map tiles for the market map | Your IP address and browser details when map tiles load (no account data) | Global content delivery network |
| Esri (ArcGIS Online) | Satellite map imagery for the market map | Your IP address and browser details when imagery loads (no account data) | United States and global network |
International transfers
Where personal data is transferred outside the EEA/UK, the transfer is protected by appropriate safeguards, such as the EU Standard Contractual Clauses and the UK International Data Transfer Addendum, together with the subprocessor's own security measures.
Questions
For subprocessor questions or to request notification of changes, email legal@valarn.com. See also our Privacy Policy and Data Processing Addendum.