Vercel

vercel.com · facts updated 2 days ago

Privacy facts at a glance

Jurisdictions: US · EU
Retention: The DPA states it will remain in effect until, and automatically terminate upon, deletion of Customer Data as described in the Addendum, but no specific retention period in days is stated.
Transfer mechanism: SCCs and Data Privacy Framework (DPF)
DPA available: Yes
Certifications: SOC 2 Type II · ISO 27001 · PCI DSS · HIPAA · TISAX · DPF
GDPR addressed: Yes
CCPA addressed: Yes

Tracked documents

https://vercel.com/legal/privacy-policy checked 9 hours ago

https://vercel.com/legal/terms checked 8 hours ago

Data processing agreement

https://vercel.com/legal/dpa checked 8 hours ago

Subprocessor list

https://vercel.com/subprocessors checked 8 hours ago

Security / trust page

https://vercel.com/security checked 18 hours ago

Data processing agreement 2 days ago

Document updated.

Security / trust page 2 days ago

Document updated.

Data processing agreement 1 week ago

Document updated.

Security / trust page 1 week ago

Document updated.

Public summary; per-account review history visible to subscribers tracking this vendor.

Get notified when Vercel adds a subprocessor, changes retention, updates their DPA, or quietly amends their privacy posture.

No card required.