Subprocessors

Last updated: August 2026

Vantage Operations Pty Ltd (ACN 699 782 708, ABN 73 699 782 708) engages the third parties listed below to store or process personal information on our behalf in the course of providing the Vantage platform.

This is the complete and current list of our subprocessors. It is the list referred to in our Privacy Policy and in any Data Processing Agreement we enter into with an Organisation.

1. Data location

All Organisation data, including member records, incident records, checklists, equipment records, photographs and documents, is stored in Australia in the Amazon Web Services Sydney region (ap-southeast-2). The application servers, the cache holding live vehicle positions, and the service carrying live updates to the operations console and to crews in the field also operate in that region.

Some subprocessors operate outside Australia, and two that operate in Australia hold their service logs in the United States. The table states, for each, the data it receives and where it operates. Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure the recipient does not breach the Australian Privacy Principles. Each subprocessor operates under a data processing agreement and holds SOC 2 Type II certification or equivalent independent assurance.

2. Current subprocessors

SubprocessorPurposeData processedLocation
Ably Real-time LtdMessage delivery between devicesVehicle positions, search trail positions, incident status changesAustralia (AWS Sydney, ap-southeast-2)
Apple Inc. (Apple Push Notification service)Notification delivery to Apple devicesNotification title and body, device tokenUnited States
Clerk, Inc.Sign-in, identity and session managementName, email address, password hash, multi-factor enrolment, sign-in recordsUnited States
Google LLC (Firebase Cloud Messaging)Notification delivery to Android devicesNotification title and body, device tokenUnited States
Google LLC (Maps Platform)Address lookup and map renderingStreet addresses and map positionsUnited States
Google LLC (Cloud Text-to-Speech)Converting text to spoken audioText submitted for reading aloudUnited States
Resend, Inc.Email deliveryRecipient name and email address, message content, delivery and bounce recordsUnited States
Stripe, Inc.Subscription billing and payment processingBilling contact name and email address, payment method, transaction and invoice recordsUnited States
Supabase, Inc. (on Amazon Web Services)Database, file storage and message deliveryAll Organisation data, encrypted at rest and in transitAustralia (AWS Sydney, ap-southeast-2)
Twilio Inc.SMS and voice call deliveryRecipient phone number, message text, call recordsAustralia (Sydney); message and call logs in the United States
Upstash, Inc.Short-term cache and request rate limitingVehicle positions and request counters, retained for minutesAustralia (AWS Sydney, ap-southeast-2)
Vercel Inc.Application hostingRequest logs, including page addresses and IP addressesAustralia (Sydney); request logs in the United States

We do not sell personal information, and none of the providers above is permitted to use Organisation data for their own purposes, including training machine-learning models.

3. Changes to this list

This page is updated whenever a subprocessor is added or removed, and the date at the top is revised accordingly.

Organisations may request advance notice of a new subprocessor being engaged. Email privacy@getvantage.com.auwith a nominated contact. We provide at least 30 days' notice before a new subprocessor begins handling Organisation data, during which an Organisation may object.

4. Contact

Questions about this list, or a request for a Data Processing Agreement or additional security documentation: