Last reviewed 12 October 2026. Email privacy@valgrind.io or support@valgrind.io to subscribe to change notices.
Current subprocessors
| Name | Role | Typical location |
|---|---|---|
| Convex, Inc. | Application database and backend | United States |
| WorkOS, Inc. | Authentication (AuthKit) | United States |
| Stripe, Inc. / Stripe Payments Europe | Payments and billing | United States / Ireland |
| Resend | Transactional email, including the contact form | United States |
| Backblaze, Inc. | Encrypted object storage for files and similar content | United States |
| Identity verification provider | KYC, KYB, and AML checks for Valgrind Verify | EEA |
| Vercel Inc. | Hosting for valgrind.io | United States / EU edge |
| Cloudflare, Inc. | Media storage and delivery (R2 / CDN) | United States / EU edge |
| BunnyWay d.o.o. (Bunny.net) | CDN for some marketing assets | EU / global edge |
| PostHog, Inc. | Analytics on valgrind.io, only after cookie consent | EU / United States |
Notes
Locations are where the vendor primarily operates. The default Valgrind service is not EU-only. Enterprise customers may contract for a custom residency arrangement.
Verify uses an identity-verification provider in the EEA. We name that provider to a customer on request. Backblaze stores encrypted objects; Valgrind staff cannot read that content in the ordinary course or assume a customer identity.