Does your organization use Vercel? One sensor, and Openwake watches it on its own: the documents re-read daily, every moved clause told.Start free
Trains on customer data
Training posture: conditional · trains unless you opt out
depends on product, account and settings
“* Opt-out of Model Training as described in Section 3 of the Terms of Service.”
Opt-out mechanism
* Opt-out of Marketing Communications.
“* Opt-out of Marketing Communications.”
AI features
present
“For Hobby and Pro plan users, subject to your data preferences in your team settings, we may disclose de-identified information (including de-identified AI Product Information) to AI business partners for their product improvement and development, including training and improving AI and machine learning models, with the ultimate purpose of improving the Vercel Services you use.”
Model providers named
OpenAI, xAI, Fireworks AI, Groq
“Vercel’s platform provides the tools and self-driving infrastructure to build, scale, and secure intelligent applications. As the most popular DX platform for frontend development and the team behind v0, Next.js, and AI SDK, we help customers like OpenAI, PayPal, Ramp, and Supreme build for the AI-native web – and ship at the speed of ideas.”
Retention
not stated
Not stated in the documents we could read. An absence here is an unknown, not a no.
Hosting regions
not stated
Not stated in the documents we could read. An absence here is an unknown, not a no.
Subprocessor notice
5 days
“If, within five (5) calendar days after such notice, Customer notifies Vercel in writing that Customer objects to Vercel's appointment of a new Subprocessor based on reasonable data protection concerns, the parties will discuss such concerns in good faith and whether they can be resolved.”
Downstream
Who's behind Vercel, as listed in its own subprocessor documents. 9 subprocessors.
Model providers
- Fireworks AIunstated
- Groqunstated
- OpenAIunstated
- xAIunstated
Hyperscalers
- Amazon Web Servicesunstated
- Microsoft Azureunstated
Other subprocessors
- Oktaunstated
- PayPalunstated
- Qualysunstated
Reviewer notes
Extracted by deterministic rules (rules/v1), no language model. Coverage is limited to recognisable clauses and a gazetteer of common subprocessors; absent values mean 'not matched', not 'not present'.
Documents read
- privacy policy https://vercel.com/legal/privacy-policyHTTP 200 · 2026-10-28
- subprocessors https://vercel.com/legal/sub-processorsHTTP 200 · 2026-10-17
- dpa https://vercel.com/legal/dpaHTTP 200 · 2026-10-28
Document changes
- high 2026-10-28 · dpa +57 / −53 lines
show diff
+ COPY LINK TO HEADING1. INTRODUCTION+ COPY LINK TO HEADING2. DEFINITIONS+ COPY LINK TO HEADING3. GENERAL; TERMINATION+ COPY LINK TO HEADING4. RELATIONSHIP OF THE PARTIES+ COPY LINK TO HEADING5. COMPLIANCE WITH LAW+ COPY LINK TO HEADING6. ROLE AND SCOPE OF THE PROCESSING+ COPY LINK TO HEADING7. SUBPROCESSING+ COPY LINK TO HEADING8. SECURITY+ COPY LINK TO HEADING9. AUDITS AND REVIEWS OF COMPLIANCE+ COPY LINK TO HEADING10. IMPACT ASSESSMENTS AND CONSULTATIONS+ COPY LINK TO HEADING11. DATA SUBJECT REQUESTS+ COPY LINK TO HEADING12. RETURN OR DELETION OF CUSTOMER DATA+ COPY LINK TO HEADING13. INTERNATIONAL PROVISIONS+ COPY LINK TO HEADINGSCHEDULE 1: SUBJECT MATTER & DETAILS OF PROCESSING+ COPY LINK TO HEADING1. NATURE AND PURPOSE OF THE PROCESSING+ COPY LINK TO HEADING2. PROCESSING ACTIVITIES+ COPY LINK TO HEADING3. DURATION OF THE PROCESSING+ COPY LINK TO HEADING4. CATEGORIES OF DATA SUBJECTS+ COPY LINK TO HEADING5. CATEGORIES OF PERSONAL DATA+ COPY LINK TO HEADING6. SENSITIVE DATA OR SPECIAL CATEGORIES OF DATA+ COPY LINK TO HEADINGSCHEDULE 2: TECHNICAL & ORGANIZATIONAL SECURITY MEASURES+ COPY LINK TO HEADING1. MEASURES OF PSEUDONYMIZATION AND ENCRYPTION OF PERSONAL DATA.+ COPY LINK TO HEADING2. MEASURES FOR ENSURING ONGOING CONFIDENTIALITY, INTEGRITY, AND AVAILABILITY AND RESILIENCE OF PROCESSING SYSTEMS AND SERVICES.+ COPY LINK TO HEADING3. MEASURES FOR ENSURING THE ABILITY TO RESTORE AVAILABILITY AND ACCESS TO PERSONAL DATA IN A TIMELY MANNER IN THE EVENT OF A PHYSICAL OR TECHNICAL INCIDENT.+ COPY LINK TO HEADING4. PROCESSES FOR REGULAR TESTING, ASSESSING AND EVALUATING THE EFFECTIVENESS OF TECHNICAL AND ORGANISATIONAL MEASURES IN ORDER TO ENSURE THE SECURITY OF PROCESSING.+ COPY LINK TO HEADING5. MEASURES FOR USER IDENTIFICATION AND AUTHORIZATION.+ COPY LINK TO HEADING6. MEASURES FOR THE PROTECTION OF DATA DURING TRANSMISSION.+ COPY LINK TO HEADING7. MEASURES FOR THE PROTECTION OF DATA DURING STORAGE.+ COPY LINK TO HEADING8. MEASURES FOR ENSURING PHYSICAL SECURITY OF LOCATIONS AT WHICH PERSONAL DATA ARE PROCESSED.+ COPY LINK TO HEADING9. MEASURES FOR ENSURING EVENTS LOGGING.− 1. INTRODUCTION− 2. DEFINITIONS− 3. GENERAL; TERMINATION− 4. RELATIONSHIP OF THE PARTIES− 5. COMPLIANCE WITH LAW− 6. ROLE AND SCOPE OF THE PROCESSING− 7. SUBPROCESSING− 9. AUDITS AND REVIEWS OF COMPLIANCE− 10. IMPACT ASSESSMENTS AND CONSULTATIONS− 11. DATA SUBJECT REQUESTS− 12. RETURN OR DELETION OF CUSTOMER DATA− 13. INTERNATIONAL PROVISIONS− SCHEDULE 1: SUBJECT MATTER & DETAILS OF PROCESSING− 1. NATURE AND PURPOSE OF THE PROCESSING− 2. PROCESSING ACTIVITIES - high 2026-10-28 · privacy policy +26 / −24 lines
show diff
+ COPY LINK TO HEADINGABOUT VERCEL PRODUCTS AND SERVICES+ COPY LINK TO HEADINGAPPLICABILITY+ COPY LINK TO HEADINGINFORMATION WE COLLECT+ COPY LINK TO HEADINGINFORMATION YOU PROVIDE DIRECTLY TO US+ COPY LINK TO HEADINGINFORMATION WE COLLECT FROM THIRD PARTIES+ COPY LINK TO HEADINGINFORMATION WE COLLECT FROM CUSTOMERS+ COPY LINK TO HEADINGINFORMATION WE COLLECT AUTOMATICALLY+ COPY LINK TO HEADINGHOW WE USE INFORMATION+ COPY LINK TO HEADINGHOW WE RETAIN YOUR INFORMATION+ COPY LINK TO HEADINGHOW WE DISCLOSE INFORMATION+ COPY LINK TO HEADINGHOW WE SECURE YOUR INFORMATION+ COPY LINK TO HEADINGTHIRD-PARTY SERVICES+ COPY LINK TO HEADINGHOW WE TRANSFER YOUR INFORMATION+ COPY LINK TO HEADINGDATA PRIVACY FRAMEWORK+ COPY LINK TO HEADINGYOUR PRIVACY RIGHTS AND CHOICES+ COPY LINK TO HEADINGMINIMUM AGE REQUIREMENTS FOR OUR SITES AND SERVICES+ COPY LINK TO HEADINGCHANGES TO OUR PRIVACY NOTICE+ COPY LINK TO HEADINGJURISDICTION-SPECIFIC INFORMATION+ COPY LINK TO HEADINGUNITED STATES+ COPY LINK TO HEADINGDATA COLLECTION, USE, AND DISCLOSURE+ COPY LINK TO HEADINGYOUR PRIVACY RIGHTS+ COPY LINK TO HEADINGEXERCISING YOUR RIGHTS+ COPY LINK TO HEADINGEEA AND UK+ COPY LINK TO HEADINGLEGAL BASES FOR PROCESSING+ COPY LINK TO HEADINGCONTACT US+ COPY LINK TO HEADINGPREVIOUS VERSIONS− ABOUT VERCEL PRODUCTS AND SERVICES− APPLICABILITY− INFORMATION WE COLLECT− INFORMATION YOU PROVIDE DIRECTLY TO US− INFORMATION WE COLLECT FROM THIRD PARTIES− INFORMATION WE COLLECT FROM CUSTOMERS− INFORMATION WE COLLECT AUTOMATICALLY− HOW WE USE INFORMATION− HOW WE RETAIN YOUR INFORMATION− HOW WE DISCLOSE INFORMATION− HOW WE SECURE YOUR INFORMATION− THIRD-PARTY SERVICES− HOW WE TRANSFER YOUR INFORMATION− DATA PRIVACY FRAMEWORK− YOUR PRIVACY RIGHTS AND CHOICES - medium 2026-10-17 · subprocessors +1 / −1 lines
show diff
+ COMPLIANCESOC 3− REPORTSPentest Reports - medium 2026-10-13 · dpa +0 / −18 lines
show diff
− Copy WordmarkCopy Logo− Download Brand AssetsBrand Guidelines− Ask AIDashboard− ----------------------------------------− * AI Gateway− Core Platform− * Content Delivery− * Fluid Compute− * Observability− * Vercel Agent− * Vercel Plugin− * Open Source− * Knowledge Base− * Marketing Sites− * Marketplace - medium 2026-10-13 · subprocessors +0 / −3 lines
show diff
− AllPublicPrivate− Bulk download− View all documents - medium 2026-10-13 · privacy policy +0 / −18 lines
show diff
− Copy WordmarkCopy Logo− Download Brand AssetsBrand Guidelines− Ask AIDashboard− ----------------------------------------− * AI Gateway− Core Platform− * Content Delivery− * Fluid Compute− * Observability− * Vercel Agent− * Vercel Plugin− * Open Source− * Knowledge Base− * Marketing Sites− * Marketplace - low 2026-09-17 · dpa +1 / −1 lines
show diff
+ Core Platform− CORE PLATFORM - low 2026-09-17 · privacy policy +1 / −1 lines
show diff
+ Core Platform− CORE PLATFORM - medium 2026-09-10 · subprocessors +1 / −1 lines
show diff
+ REPORTSPentest Reports− REPORTSPentest Report - low 2026-09-06 · dpa +2 / −2 lines
show diff
+ * http://aws.amazon./+ * https://docs.microsoft.− * http://aws.amazon.com/security/sharing-the-security-responsibility/− * https://docs.microsoft.com/en-us/azure/security/fundamentals/physical-security
Fact changes
- high 2026-09-05 · 0 field change(s), +9/−0 subprocessors, +4 model providers
Corrections
No correction requests. Anyone may dispute a fact with a source; requests and resolutions are public and ledger-entered.
Facts are as stated in Vercel's public documents on the date read. This is a record, not legal advice. Work for Vercel? Claim this profile · Something wrong? Request a correction.