Legal

Subprocessors.

Every third-party service that processes customer data on behalf of Velora Billing. Each row is the truthful posture today — BAA status reflects where the executed contract physically sits, not “we sent the redline back”.

PHI column:"Yes" = always handles PHI. "Conditional" = handles PHI only on tenants that upload PHI-bearing files (e.g. enrollment census with member SSN). "No" = never sees PHI under any code path.

SubprocessorPurposeRegionPHIBAA
AnthropicClaude LLM — invoice parsing assistance + dispute draftingUSConditionalRequired + executed
Reducto.aiPDF extraction (invoice tables → structured rows)USConditionalRequired + pending
Neon (Postgres)Primary database (us-east-1)USYesRequired + executed
VercelApplication hosting + edge networkUSYesRequired + executed
Vercel BlobTemporary PDF storage on the way to Reducto (auto-deleted post-parse)USConditionalRequired + executed
ResendTransactional email + inbound dispute reply ingestionUSConditionalRequired + pending
Upstash (Redis)Rate limiting for API + auth routesUSNoNot required (no PHI)
StripeVelora's own SaaS billing — never receives PHI or member dataUSNoNot required (no PHI)
GitHubSource control, CI/CDUSNoNot required (no PHI)

Subprocessor change notice

We notify customer tenant owners at least 30 days before adding a new subprocessor that will process their PHI. The DPA contains the objection mechanism. Notifications go to the email on file for each tenant's OWNER role.

Audit trail

This page reflects the production list as of the last-updated date below. Historical revisions are available on request — email hello@hellovelora.com.

Last updated: 2026-04-29

← Back to /trust