Vercel

vercel.com · facts updated 51 minutes ago

Privacy facts at a glance

Jurisdictions: US · EU
Retention: Data retention is addressed in Schedule 2 of the DPA under 'Data Retention' but specific duration is not stated in the excerpts provided.
Transfer mechanism: SCCs and Data Privacy Framework (DPF), as referenced in the DPA Schedule 3 and security page
DPA available: Yes
Certifications: SOC 2 Type II · ISO 27001 · PCI DSS · HIPAA · GDPR · DPF · TISAX
GDPR addressed: Yes
CCPA addressed: Yes

Tracked documents

https://vercel.com/legal/privacy-policy checked 1 hour ago

https://vercel.com/legal/terms checked 1 hour ago

Data processing agreement

https://vercel.com/legal/dpa checked 1 hour ago

Subprocessor list

https://vercel.com/subprocessors checked 56 minutes ago

Security / trust page

https://vercel.com/security checked 11 hours ago

minor Subprocessor list 56 minutes ago

Vercel's subprocessor list shows 'Login – Vercel' was removed and re-added with no net change in subprocessors.

Public summary; per-account review history visible to subscribers tracking this vendor.

Get notified when Vercel adds a subprocessor, changes retention, updates their DPA, or quietly amends their privacy posture.

No card required.