Subprocessors
Last updated: November 3, 2026
A subprocessor is a third-party company that processes personal information on our behalf so we can run our business and deliver services to our clients. This page lists the subprocessors VanRein Compliance uses today, what each one does, the kinds of data involved, and where it is located. Each one is bound by a contract that limits how it can use the information.
Protected health information (PHI) is handled only as our business associate agreements (BAAs) allow. Where a provider handles PHI for a client engagement, we have the agreements HIPAA requires in place before PHI is shared. See our Privacy Policy for more on how we handle personal information.
Service and client data
Google LLC
Service. Google Workspace
Purpose. Business email, file storage, calendar, video meetings, meeting notes, and document signing
Data categories. Contact details, correspondence, files you share with us, meeting recordings and notes
Location. United States
Slack Technologies, LLC
Service. Slack
Purpose. Internal team messaging about client work
Data categories. Names, work contact details, project discussion
Location. United States
HubSpot, Inc.
Service. HubSpot
Purpose. Customer relationship management and website inquiry records
Data categories. Names, work contact details, company details, correspondence history
Location. United States
Stacker Software Ltd
Service. Stacker
Purpose. VRC1 client portal for compliance projects, tasks, and audit status
Data categories. Client user names and work emails, project and audit records, uploaded documents
Location. United Kingdom
Granola, Inc.
Service. Granola
Purpose. Meeting notes and transcripts for client and prospect calls
Data categories. Participant names and emails, meeting transcripts and notes
Location. United States
Docsketch, LLC (dba SignWell)
Service. SignWell
Purpose. Electronic signature of proposals and agreements
Data categories. Signer names and emails, IP address, signed documents
Location. United States
Xero Limited
Service. Xero
Purpose. Invoicing and accounting
Data categories. Billing contact names, emails, and addresses; invoice and payment records
Location. New Zealand, Australia, United States
beehiiv Inc.
Service. beehiiv
Purpose. Email newsletter
Data categories. Subscriber email and name, open and click activity
Location. United States
Website
Vercel Inc.
Service. Vercel
Purpose. Website hosting, contact form processing, and cookie-free page view analytics
Data categories. IP address, browser and device data, form submissions, page views
Location. United States
Plus Five Five, Inc.
Service. Resend
Purpose. Delivers contact form submissions to our team by email
Data categories. Name, email address, message
Location. United States
Zapier, Inc.
Service. Zapier
Purpose. Routes contact form submissions into our business systems
Data categories. Name, email address, message
Location. United States
Cloudflare, Inc.
Service. Cloudflare Turnstile
Purpose. Spam and bot protection on the contact form
Data categories. IP address, browser and device signals
Location. United States
Google LLC
Service. Google Analytics 4
Purpose. Website analytics, only after you accept analytics cookies
Data categories. Pseudonymous identifiers, approximate location, pages viewed, device data
Location. United States
Conva Ventures Inc.
Service. Fathom Analytics
Purpose. Cookie-free website analytics
Data categories. Pages viewed, referring site, browser and device type
Location. Canada
GetTerms
Service. GetTerms
Purpose. Cookie consent banner and storage of your cookie choices
Data categories. Consent choices, IP address, browser data
Location. Australia, Singapore
Senja Proof LTD
Service. Senja
Purpose. Displays customer testimonials on our pages
Data categories. IP address, browser data
Location. United Kingdom
How we tell you about changes
When we add or replace a subprocessor that handles client data, we update this page and change the "Last updated" date before the new subprocessor starts processing that data.
- Clients with a services agreement or BAA: we email your main contact at least 30 days before the change takes effect, except where an urgent change is needed to keep services running or secure. In that case we tell you as soon as we can.
- Anyone else: to get these updates by email, write to hello@vanreincompliance.com with the subject "Subprocessor updates."
- Objections: if you are a client and have a reasonable data protection concern about a new subprocessor, reply to the notice or email hello@vanreincompliance.com within the notice period. We will work with you in good faith to address it.
Questions
Email hello@vanreincompliance.com or call 830-201-1880.