| Provider | Purpose | Location | Data |
|---|---|---|---|
| Hetzner Online GmbH | Application hosting, PostgreSQL, object storage | Germany / Finland (EU) | All service data; file contents (ciphertext in E2EE mode) |
| [Second EU S3 provider — Scaleway or OVHcloud] | Fallback object storage for new uploads | France (EU) | File objects, when activated |
| [EU transactional email provider] | Notification and sign-in emails | EU | Email addresses, message text |
| Paddle.com Market Ltd | Merchant of record: payments, VAT, invoices | Ireland (EU) | Billing details, card data (never stored by Vessio) |
| [EU identity-verification provider] | Optional identity check (Team plan) | EU | Identity documents, handled by the provider |
| abuse.ch (Bern University of Applied Sciences) | Malware hash feed | Switzerland | None sent; hashes are downloaded |
| MaxMind GeoLite2 (offline database) | Country of a download for the sender's log | Offline, no requests leave the server | None sent. This product includes GeoLite2 data created by MaxMind. |
Bracketed providers are not yet contracted; they are listed so the shape of the list is known before launch.