Trains on customer data
by default · opt-out available
“* Opt-out of Model Training as described in Section 3 of the Terms of Service.”
Opt-out mechanism
* Opt-out of Marketing Communications.
“* Opt-out of Marketing Communications.”
AI features
present
“For Hobby and Pro plan users, subject to your data preferences in your team settings, we may disclose de-identified information (including de-identified AI Product Information) to AI business partners for their product improvement and development, including training and improving AI and machine learning models, with the ultimate purpose of improving the Vercel Services you use.”
Model providers named
OpenAI, xAI, Fireworks AI, Groq
“Vercel’s platform provides the tools and self-driving infrastructure to build, scale, and secure intelligent applications. As the most popular DX platform for frontend development and the team behind v0, Next.js, and AI SDK, we help customers like OpenAI, PayPal, Ramp, and Supreme build for the AI-native web – and ship at the speed of ideas.”
Retention
not stated
Not stated in the documents we could read. An absence here is an unknown, not a no.
Hosting regions
not stated
Not stated in the documents we could read. An absence here is an unknown, not a no.
Subprocessor notice
5 days
“If, within five (5) calendar days after such notice, Customer notifies Vercel in writing that Customer objects to Vercel's appointment of a new Subprocessor based on reasonable data protection concerns, the parties will discuss such concerns in good faith and whether they can be resolved.”
Downstream
Who's behind Vercel, as listed in its own subprocessor documents. 9 listed.
Model providers
- Fireworks AIunstated
- Groqunstated
- OpenAIunstated
- xAIunstated
Hyperscalers
- Amazon Web Servicesunstated
- Microsoft Azureunstated
Other subprocessors
- Oktaunstated
- PayPalunstated
- Qualysunstated
Reviewer notes
Extracted by deterministic rules (rules/v1), no language model. Coverage is limited to recognisable clauses and a gazetteer of common subprocessors; absent values mean 'not matched', not 'not present'.
Documents read
- privacy policy https://vercel.com/legal/privacy-policyHTTP 200 · 2026-09-06
- subprocessors https://vercel.com/legal/sub-processorsHTTP 200 · 2026-09-06
- dpa https://vercel.com/legal/dpaHTTP 200 · 2026-09-06
Document changes
- low 2026-09-06 · dpa +2 / −2 lines
show diff
+ * http://aws.amazon./+ * https://docs.microsoft.− * http://aws.amazon.com/security/sharing-the-security-responsibility/− * https://docs.microsoft.com/en-us/azure/security/fundamentals/physical-security - medium 2026-09-06 · subprocessors +1 / −1 lines
show diff
+ We’re pleased to announce that we recently completed an independent third-party report to ensure that we support compliance with the HIPAA Security Rule and HITECH Breach Notification Requirements as a Business Associate. Our HIPAA report is available for download. For more information, see our blog post at https://vercel..− We’re pleased to announce that we recently completed an independent third-party report to ensure that we support compliance with the HIPAA Security Rule and HITECH Breach Notification Requirements as a Business Associate. Our HIPAA report is available for download. For more information, see our blog post at https://vercel.com/blog/vercel-supports-hipaa-compliance. - low 2026-09-06 · privacy policy +1 / −1 lines
show diff
+ If a privacy complaint or dispute relating to personal information received by Vercel in reliance on the Data Privacy Framework (or any of its predecessors) cannot be resolved through our internal processes, we have agreed to participate in the VeraSafe Data Privacy Framework Dispute Resolution Procedure. Subject to the terms of the VeraSafe Data Privacy Framework Dispute Resolution Procedure, VeraSafe will provide appropriate recourse free of charge to you. To file a complaint with VeraSafe and participate in the VeraSafe Data Privacy Framework Dispute Resolution Procedure, please submit the required information here: https://www.verasafe./.− If a privacy complaint or dispute relating to personal information received by Vercel in reliance on the Data Privacy Framework (or any of its predecessors) cannot be resolved through our internal processes, we have agreed to participate in the VeraSafe Data Privacy Framework Dispute Resolution Procedure. Subject to the terms of the VeraSafe Data Privacy Framework Dispute Resolution Procedure, VeraSafe will provide appropriate recourse free of charge to you. To file a complaint with VeraSafe and participate in the VeraSafe Data Privacy Framework Dispute Resolution Procedure, please submit the required information here: https://www.verasafe.com/privacy-services/dispute-resolution/submit-dispute/.
Fact changes
- high 2026-09-05 · 0 field change(s), +9/−0 subprocessors, +4 model providers
Corrections
No correction requests. Anyone may dispute a fact with a source; requests and resolutions are public and ledger-entered.
Facts are as stated in Vercel's public documents on the date read. This is a record, not legal advice. Work for Vercel? Claim this profile · Something wrong? Request a correction.