SERVICE PROVIDERS

SERVICE PROVIDERS

Introduction

Introduction

Vesting Labs Ltd ("TokenOps", "we", "us") engages the third-party service providers listed below in connection with the operation of the TokenOps platform. Where these providers process personal data on our behalf, they act as sub-processors under the General Data Protection Regulation (GDPR) and equivalent applicable privacy frameworks. We enter into Data Processing Agreements (DPAs) with each sub-processor and require them to implement appropriate technical and organisational measures to protect personal data. We update this list when sub-processors are added or removed, with at least 30 days' notice of material changes where required by our agreements with customers.

For any queries regarding this list, contact: privacy@tokenops.xyz

Name

Name

Purpose

Purpose

Entity Country

Entity Country

Website

Website

INFRASTRUCTURE & DATA STORAGE

INFRASTRUCTURE & DATA STORAGE

Vercel, Inc.

Cloud hosting, serverless compute, and CDN delivery of the platform

United States

vercel.com

MongoDB, Inc.

Primary database for user accounts, organisations, and vesting data

United States

mongodb.com

Redis Ltd. (Redis Cloud)

Session management, rate limiting, and application caching

United States

redis.com

Dynamic Labs, Inc.

Wallet-based authentication and user identity management

United States

Reown, Inc. (formerly WalletConnect Inc.)

Wallet connection protocol for Web3 wallet integration

United States

Alchemy Insights, Inc.

Blockchain node infrastructure and on-chain data API

United States

Safe Ecosystem Foundation

Smart contract wallet (Safe multisig) for on-chain operations

Switzerland

Alchemy Insights, Inc.

Blockchain node infrastructure and on-chain data API

United States

Resend, Inc

Transactional email delivery (notifications, invites, alerts)

United States

Better Stack, Inc

Application error monitoring

United States

Notes on data transfers

Notes on data transfers

Several sub-processors listed above are located in the United States or other countries outside the European Economic Area (EEA). Where personal data is transferred to such countries, we ensure adequate safeguards are in place, including:

• EU Standard Contractual Clauses (SCCs) as adopted by the European Commission

• UK International Data Transfer Agreements (IDTAs) or UK Addenda to EU SCCs where applicable

• Swiss equivalents where applicable

Zama SAS is located in France and processes data within the EEA; no international transfer is required for FHE operations. Safe Ecosystem Foundation is located in Switzerland, which the European Commission has determined provides an adequate level of data protection.

Changes to the list

Changes to the list

We review and update this list on an ongoing basis. The current version is always available at: tokenops.xyz/legal/subprocessors Customers who have agreed to a Data Processing Agreement with Vesting Labs Ltdwill be notified of any new sub-processor additions in accordance with the objection procedure set out in their DPA.

Contact

Contact

Vesting Labs Ltd

privacy@tokenops.xyz

tokenops.xyz

Tokenops has been acquired by Zama →