Legal
Data processing
Last updated 28 October 2026
When Vantage processes personal data on behalf of a client, the client is the controller and Vantage is the processor. Our Data Processing Policy sets out how we handle that data, and it forms part of every agreement we sign with a client. This page holds the current policy and its sub-processor list, notices of changes to that list, and the earlier versions of both. How we handle data from this website and from people who contact us is covered by our privacy policy.
The Data Processing Policy
The current version is dated 28 October 2026. It covers both of our services, Capture and the Context Platform (Compound). The statement of work for each engagement says which services apply.
Sub-processors
This is Annex III of the Data Processing Policy. The list was last updated on 28 October 2026 and took effect on 28 October 2026.
All services:
- Microsoft (Microsoft 365). Nature of processing: E-mail, file storage and collaboration. Territory and transfer safeguard: EEA (Netherlands tenant).
Capture:
- Anthropic. Nature of processing: AI model processing. Territory and transfer safeguard: Stored in the United States; processing may take place in other countries (global routing). Standard contractual clauses.
- ElevenLabs. Nature of processing: Voice interviews: speech-to-text and conversation handling. ElevenLabs uses Anthropic models as its own sub-processor. Territory and transfer safeguard: United States (EU-U.S. Data Privacy Framework; standard contractual clauses).
- Supabase. Nature of processing: Database, file storage and authentication. Territory and transfer safeguard: EEA (Ireland). Standard contractual clauses.
- Vercel. Nature of processing: Web application hosting. Territory and transfer safeguard: EEA (Dublin, Ireland). Standard contractual clauses.
Context Platform (Compound):
- Microsoft (Microsoft Azure). Nature of processing: Cloud hosting of the Context Platform. Territory and transfer safeguard: EEA (North Europe, Ireland).
Changes to the sub-processor list
When we add or replace a sub-processor, we update the list above, mark what changed, and date both the update and the day the change takes effect. We announce each change here and tell each client by e-mail. A client may object on reasonable grounds within 30 days of that notice, as section 7 of the policy sets out.
No changes have been announced since the list was first published on 28 October 2026.
Earlier versions
The policy and the sub-processor list above are the first published versions, so there are no earlier versions yet. When either changes, the earlier version stays available here, with its dates.
Contact
Vantage AI B.V., Keizersgracht 452, 1016 GD Amsterdam, the Netherlands, KvK 42186948. For anything about data processing, including an objection to a sub-processor, email contact@vantagegroup.ai.