Subprocessors

How to read this register

A subprocessor is a third-party provider that may process personal data or customer data on behalf of Vantus. The exact providers used for a customer engagement can depend on the signed statement of work, architecture, hosting model, payment flow, support path, and security requirements.

This page is a public register for core providers. A customer agreement or data processing agreement may include a narrower list, additional customer-specific subprocessors, notice rights, objection rights, security addenda, or regulated-data restrictions.

Core subprocessors

Security and vendor controls

Vantus expects subprocessors to use reasonable security controls, process data only for authorized purposes, restrict access to personnel with a need to know, and notify Vantus of incidents that may affect customer or personal data. Where Florida law applies, contracts should support prompt third-party incident notice so Vantus and its customers can meet statutory breach obligations.

Regulated-data limits

Public-site subprocessors are not authorized to receive protected health information, personal health records, child data, biometric data, precise geolocation data, or other sensitive regulated data unless a signed agreement specifically permits that processing and the required safeguards, business associate agreement, data processing agreement, or vendor assurances are in place.

Subprocessor changes

Vantus may add, replace, or remove subprocessors as services, security requirements, infrastructure, or customer needs change. We will update this page when the public register materially changes. Customer agreements may provide additional notice or objection rights.

Questions

Questions about subprocessors or customer-specific data processing terms can be sent to legal@vantus.systems or raised through the contact form.