Compliance · Data protection
Subprocessors
This page lists the subprocessors Vermont Solutions S.L. uses to operate its public website. It supports enterprise due diligence prior to signing the Data Processing Agreement (DPA).
Service delivery: 100% in-house
Vermont Solutions delivers its consulting and engineering services with its own teams, without subcontracting. For client project data processed under a service agreement, Vermont does not rely on subprocessors except those expressly agreed in writing with the client. Where a client engagement runs on the client's own cloud or on infrastructure designated by the client, those providers act under the client's instructions, not Vermont's.
Website subprocessors
| Subprocessor | Purpose | Data | Location | Transfer safeguard |
|---|---|---|---|---|
| Vercel Inc. | Website hosting and content delivery (CDN) | IP, technical logs and browsing data | EE. UU. / edge global | CCT + EU-US DPF |
| Web3Forms (Web3Forms Inc.) | Processing of contact and assessment forms | Form data (name, email, message) | EE. UU. | CCT (Decisión 2021/914) |
| Google Ireland Ltd. / Google LLC | Web analytics (GA4) and tag management (GTM) | Cookie identifiers and usage events (with consent) | UE / EE. UU. | CCT + EU-US DPF |
| Microsoft Ireland Operations Ltd. / Microsoft Corp. | Behavioural analytics (Clarity) | Page interaction and heatmaps (with consent) | UE / EE. UU. | CCT + EU-US DPF |
CCT = EU Standard Contractual Clauses (Commission Decision 2021/914). EU-US DPF = EU-US Data Privacy Framework. Analytics subprocessors only process data after consent is granted in the cookie banner.
DPA and notice of changes
The Data Processing Agreement (GDPR Art. 28) governs the processing relationship and incorporates this subprocessor list. Download it from the Trust Center.
To be notified of changes to this list before they take effect, write to .
Last updated: 2026-06-03. This list reflects subprocessors of the public website; it is not legal advice. Entities, locations and transfer mechanisms are subject to confirmation.