GeoVector, operated by Zinc Labs Pte. Ltd. (Singapore), uses the third-party sub-processors listed below to provide its services. Each sub-processor is engaged under data-processing terms and assessed for security posture, data location, and contractual commitments before adoption, and re-reviewed annually. All large language model (LLM) providers are used via commercial API terms under which customer inputs are not used for model training.
Current sub-processors
| Vendor | Purpose | Data location |
|---|---|---|
| Vercel Inc. | Web application hosting | Global edge network; serverless functions in Singapore (sin1) |
| Railway Corp. | API backend hosting and job queues | Singapore |
| Supabase Inc. | Managed PostgreSQL database | Singapore (AWS ap-southeast-1) |
| Google Cloud (Google LLC) | Batch compute and object storage | Singapore; ephemeral collection workers also in the US and Thailand |
| Stripe, Inc. | Payment processing | United States / global |
| Resend (Plus Five Five, Inc.) | Transactional email | United States |
| OpenAI, L.L.C. | LLM API for analysis and content generation | United States |
| Anthropic, PBC | LLM API for assistant, generation, and edit assistance | United States |
| Google LLC (Gemini API) | LLM API for analysis and content generation | United States / global |
| Xiaomi Technologies Singapore Pte. Ltd. (MiMo API) | LLM API for drafting and sentiment analysis | Singapore / Europe |
Notes
- Customer-connected destinations (for example Webflow, LinkedIn, or your own Google account) receive content only when you explicitly connect your account and direct delivery. They are recipients you choose, not GeoVector sub-processors.
- Transit vendors: for AI-assistant queries in specific regions, GeoVector may route requests through a residential proxy provider (currently IPRoyal). Prompt text configured in your workspace may transit this provider; no customer personal data or credentials are sent.
- Payment card data is handled entirely by Stripe and never touches GeoVector systems.
- International transfers: where customer personal data is transferred outside its origin region (for example from the EEA, the UK, or Singapore to the United States), the transfer is safeguarded under the vendor’s data-processing terms, which incorporate the EU Standard Contractual Clauses and/or rely on the vendor’s EU–US Data Privacy Framework certification, where applicable.
Changes to this list
We update this page at least 30 days before a new sub-processor processes customer personal data, and notify each customer’s registered administrative or billing contact by email. Customers with a Data Processing Addendum may object to a new sub-processor on reasonable data-protection grounds as described in the DPA. To receive change notifications at an additional email address, contact privacy@geovector.ai.
Contact
Questions about this list or our data-processing practices: privacy@geovector.ai. See also our Privacy Policy.