Sub-processors
Last updated 27 July 2026
Vitalis AI uses the third-party services below to operate the product. Each one is bound by a data processing agreement, receives only what it needs to do its job, and is listed here so you always know who can touch your data.
This page is updated when we engage a new sub-processor or stop using an existing one - see Changes to this list below.
Current sub-processors
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
Supabase Supabase, Inc. | Database, authentication, and file storage - the primary data store. | Account details, workspace data, campaign records, uploaded files, encrypted platform tokens. | United States |
Vercel Vercel Inc. | Application hosting and serverless compute. | All data transits the application layer; nothing is stored at rest here. | United States |
Anthropic Anthropic PBC | Powers the marketing agents and the in-product assistant - research, strategy, and ad copy. | Campaign performance data, your knowledge base, and the brief for each run. Not used to train models. | United States |
OpenAI OpenAI, L.L.C. | Speech to text - turns dictation and meeting audio into the words on your screen. | Audio you record while dictating or while Loop is listening to a meeting, held only for the length of the request and never stored by us. | United States |
Runway Runway AI, Inc. | Generates ad images and video from the creative briefs. | Scene descriptions written by the Creative Director, and any product photos you upload as references. | United States |
Higgsfield Higgsfield AI | Generates ad images and video (secondary creative engine). | Scene descriptions written by the Creative Director. | United States |
Google Google LLC | Veo video generation for premium ad creative. | Scene descriptions written by the Creative Director. | United States |
Stripe Stripe, Inc. | Subscription billing, and reading your revenue when you connect Stripe. | Billing contact and subscription status. Card details go to Stripe directly - Vitalis AI never sees or stores them. | United States |
Platforms you connect are not sub-processors
Meta, Google Ads, TikTok, Amazon, Square, and Stripe Connect are your accounts. When you connect one, Vitalis AI reads and writes data in a system you already control and already have your own agreement with. We are not sending your data to a new party - we are acting on the account on your instruction.
You can disconnect any of them at any time from Connections, which deletes the stored access token immediately.
What every sub-processor is held to
- A written data processing agreement covering confidentiality and security.
- Access limited to the data needed for their specific function - nothing broader.
- No use of your data to train general-purpose AI models, and no sale or sharing with data brokers or advertisers.
- Encryption in transit, and encryption at rest for the platform tokens we hold (AES-256-GCM under a server-only key).
Changes to this list
We update this page when a sub-processor is added or removed. If you would like advance notice of changes, email legal@govitalisai.com and we will add you to the notification list.
Questions
For a copy of our data processing agreement, a sub-processor’s DPA, or anything else about how your data is handled, contact legal@govitalisai.com.
Applied Intelligence Solutions LLC · Austin, Texas, United States