GeoVector, operated by Zinc Labs Pte. Ltd. (Singapore), uses the third-party sub-processors listed below to provide its services. Each sub-processor is engaged under data-processing terms and assessed for security posture, data location, and contractual commitments before adoption, and re-reviewed annually. All large language model (LLM) providers are used via commercial API terms under which customer inputs are not used for model training.
Current sub-processors
| Vendor | Purpose | Data location |
|---|---|---|
| Vercel Inc. | Web application hosting | Global edge network; serverless functions in Singapore (sin1) |
| Railway Corp. | API backend hosting and job queues | Singapore |
| Supabase Inc. | Managed PostgreSQL database | Singapore (AWS ap-southeast-1) |
| Google Cloud (Google LLC) | Batch compute and object storage | Singapore; ephemeral collection workers also in the US and Thailand |
| Stripe, Inc. | Payment processing | United States / global |
| Resend (Plus Five Five, Inc.) | Transactional email | United States |
| OpenAI, L.L.C. | Embedding, image and LLM API for text embeddings used in matching and search, article images, AI-response collection via API, and outreach content where selected | United States |
| Anthropic, PBC | LLM API for content drafting, and for outreach content and reports where selected | United States |
| Google LLC (Gemini API) | LLM API for research and deep research, analysis, enrichment, edit assistance, reports and content generation, and for drafting when Anthropic fails or is restricted | United States / global |
| Xiaomi Technologies Singapore Pte. Ltd. (MiMo API) | LLM API for section planning, FAQ answers, sentiment analysis and staff editorial review — not used for workspaces created from 31 July 2026 unless they opt in; those workspaces use Google Gemini for these stages | Singapore / Europe |
Notes
- Customer-connected destinations (for example Webflow, LinkedIn, or your own Google account) receive content only when you explicitly connect your account and direct delivery. They are recipients you choose, not GeoVector sub-processors.
- Transit vendors: for AI-assistant queries in specific regions, GeoVector may route requests through a residential proxy provider (currently IPRoyal). Prompt text configured in your workspace may transit this provider; no customer personal data or credentials are sent.
- Payment card data is handled entirely by Stripe and never touches GeoVector systems.
- International transfers: where customer personal data is transferred outside its origin region (for example from the EEA, the UK, or Singapore to the United States), the transfer is safeguarded under the vendor’s data-processing terms, which incorporate the EU Standard Contractual Clauses and/or rely on the vendor’s EU–US Data Privacy Framework certification, where applicable.
Changes to this list
We update this page at least 30 days before a new sub-processor processes customer personal data, and notify each customer’s registered administrative or billing contact by email. Customers with a Data Processing Addendum may object to a new sub-processor on reasonable data-protection grounds as described in the DPA. To receive change notifications at an additional email address, contact privacy@geovector.ai.
Contact
Questions about this list or our data-processing practices: privacy@geovector.ai. See also our Privacy Policy.