Trust
Subprocessors
The companies that handle data on Vigilia’s behalf: what each one does, what it handles, and where. Last updated 11 October 2026.
Where your data is
What your app sends to Vigilia is stored and processed in the EU, in Belgium and the Netherlands. Three things leave the EU, each for one purpose:
- Diagnosis. The scrubbed context of a new error goes to Anthropic in the United States, so an AI model can explain it. Personal data patterns are removed twice before that: in the browser and on arrival.
- Sign-in. Your own email address and password hash are held by Firebase Authentication, which Google runs in the United States.
- Email. Alerts and reports are sent through Resend, in the United States.
Those transfers rely on the EU Standard Contractual Clauses in each provider’s data processing terms.
One more thing travels: every request reaches Vigilia through Google’s worldwide network, which notes the IP address behind it at the location nearest that browser. Vigilia itself strips IP addresses from what it stores.
The list
Google Cloud
Google Cloud EMEA Limited, Ireland
The database (Cloud Firestore), and the services that receive events and run diagnoses (Cloud Run).
Handles: Everything you see in Vigilia: your account, your apps, the scrubbed events they send, incidents and diagnoses.
Where: The EU. Database in Belgium and the Netherlands (multi-region eur3), services in Belgium (europe-west1).
Firebase Authentication
Google
Signs you in to the dashboard.
Handles: Your email address, a hash of your password (or your Google sign-in), and when you last signed in.
Where: The United States. Google runs this service only from US data centres.
Firebase Hosting
Google
Serves this website, the dashboard and the vigilia.js script, and passes the events the script sends on to our services.
Handles: The IP address and browser behind each request, in Google’s request logs. That includes your app’s visitors, when their browser loads the script or reports an error.
Where: Google’s worldwide network: the location nearest the visitor.
Anthropic
Anthropic, PBC
Writes the plain-language explanation and the fix prompt for a new error.
Handles: The scrubbed context of that error only: the message, the stack, the failing request and the clicks before it. No account details. Anthropic does not train its models on it.
Where: The United States. Anthropic’s API offers no EU-only processing.
Resend
Resend, Inc.
Sends Vigilia’s emails: alerts, weekly reports, “your fix worked”.
Handles: The address the email goes to, and what the email says (a plain-language summary of the incident).
Where: The United States.
Creem
Armitage Labs OÜ, Estonia
Sells Vigilia subscriptions as merchant of record: checkout, invoices and tax.
Handles: Your name, email, billing address and payment details. Card details never reach Vigilia; we keep only a customer reference, the plan and any discount code.
Where: The EU (Estonia). Creem’s own payment providers may process in the United States.
Google Analytics
Google Ireland Limited
Counts visits to this website and the dashboard.
Handles: Pages opened and buttons pressed, with the IP address shortened. Nothing from your app or its visitors.
Where: Google’s servers, in the EU and the United States.
Creem is the seller of record for your subscription, so it handles your payment details under its own privacy policy rather than on our instructions. It is listed here so the picture is complete.
Services you connect yourself
These are not subprocessors: Vigilia sends them something only because you asked it to, and you can disconnect each one in Settings.
- Your AI assistant (Claude, Cursor, Lovable, Bolt and others, over MCP or the API): it reads the incidents and fix prompts you allow, under your agreement with its provider.
- Slack, Discord and your own webhook endpoints: the alerts you route there.
- GitHub, Linear, Jira and Sentry: the issues and comments you ask Vigilia to open.
When this list changes
This page changes before a new company starts handling data. If you need to be told by email, or you need a signed data processing agreement, write to support@getvigilia.com.
What Vigilia collects, how long it keeps it and your rights are in the privacy policy.