Subprocessors
Last updated: August 15, 2026
To provide the Valarn service we engage the third-party subprocessors below. Each processes personal data only on our documented instructions and under a data protection agreement. This list is the current set of subprocessors; we will update this page and, where required, notify customers before engaging a new one.
| Subprocessor | Purpose | Data processed | Region |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting, database, and file storage | All service data (encrypted at rest) | United States |
| Clerk | Authentication and account management | Email, name, authentication identifiers | United States |
| Stripe | Payments and subscription billing | Billing contact, payment metadata (card data handled by Stripe, never by Valarn) | United States |
| OpenAI | AI research generation and content translation | Report inputs and prompts (not account credentials) | United States |
| Anthropic | AI research generation and compliance review | Report inputs and prompts | United States |
| Google (Gemini) | AI research generation (optional provider) | Report inputs and prompts | United States |
| DeepSeek | AI research generation (optional provider) | Report inputs and prompts | United States |
| xAI (Grok) | AI research generation (optional provider) | Report inputs and prompts | United States |
| ElevenLabs | Text-to-speech for audio narration | Report text submitted for narration | United States |
| Brevo (Sendinblue) | Transactional and marketing email delivery | Email address, name, engagement events | European Union |
| Financial Modeling Prep (FMP) | Market and reference data | Ticker queries (no personal data) | United States |
| Chatwoot | Live customer support chat (when you use support) | Name, email, and plan when you engage support | Self-hosted (United States) |
| Plaid | Brokerage account connection (only if you connect one) | Brokerage credentials handled by Plaid; Valarn receives holdings, never your login | United States |
International transfers
Where personal data is transferred outside the EEA/UK, the transfer is protected by appropriate safeguards, such as the EU Standard Contractual Clauses and the UK International Data Transfer Addendum, together with the subprocessor's own security measures.
Questions
For subprocessor questions or to request notification of changes, email legal@valarn.com. See also our Privacy Policy and Data Processing Addendum.