Sub-processors
Last updated: November 2026
These are the third-party service providers Value Aligners Inc. uses to deliver the platform. Each one processes data only as needed to perform its function. See also our Privacy Policy.
Anthropic
Claude API
Writes finding recommendations, scan co-pilot answers and compliance summaries when you use those AI features.
Data: Finding titles and descriptions, client company name, asset names (hosts, domains), framework scores and answers you entered.
Vertex AI and Gemini API
Runs the client analysis, client Q&A, questionnaire help, solution suggestions and policy drafts when a Google model is used.
Data: Client profile answers, scan summaries and finding categories, client company name.
Microsoft Azure
App Service hosting and Key Vault
Hosts the application and holds the platform's secrets.
Data: All data you enter or we collect for you, while it is processed.
MongoDB Atlas
Primary database
Stores your account, clients, findings, tasks, risks, reports metadata, policies and settings.
Data: All data you enter or we collect for you, at rest.
Supabase
Sign-in (authentication)
Signs you and your team in.
Data: Name and email address, sign-in identifiers.
Twilio SendGrid
Transactional email
Sends team and client invitations, report links and digests you turn on.
Data: Recipient email addresses and names, email content.
Google Workspace (Gmail SMTP)
Email fallback
Sends the same emails when the primary email provider is not available.
Data: Recipient email addresses and names, email content.
Stripe
Payments and billing
Takes subscription and credit payments.
Data: Billing contact and payment details (held by Stripe), order references that can name a managed client.
Other service providers
We use these for signing, booking, partner sales, website forms, AI fallback or a security test you ask for. They are not on the normal path for client data.
DocuSign
Electronic signature
Handles agreements signed electronically during partner and NDA flows.
Data: Signer names and email addresses, the document being signed.
Calendly
Meeting booking
Books meetings with our team.
Data: Name, email address and the details you enter when booking.
Zoho CRM
Partner and lead records
Keeps partner and lead records for our sales team.
Data: Business contact details and notes about the partner or lead.
BestDefense
Security testing
Runs a security test only when one is requested and authorized for a named client.
Data: The client name and the domains or assets in scope, and the test results.
Microsoft Azure OpenAI
AI fallback
Answers Virtual CISO chat when the primary AI provider is not available.
Data: Your chat messages and the context sent with them.
LiveAvatar
Video avatar
Runs the video avatar when you choose a live consultation in chat.
Data: What you say or type in that session.
Cloudflare Turnstile
Bot protection
Checks that website forms are sent by a person.
Data: IP address and browser signals.