Security & trust

Subprocessors

vikingQA (Neocap SRL) uses the companies below to deliver the service. Each one is bound by a data processing agreement. We announce a new subprocessor 30 days before it starts to process customer data, and you may object.

Subprocessors that handle your application’s content

Every provider named on this page. Roadmap Today the data processing agreement names each one, and we send the current list when you write to privacy@vikingqa.io.

Model providers do not train their models on your data. This is a term of our contracts with them.

SubprocessorPurposeWhat it receivesLocation
AnthropicThe model that explores your application and writes testsPage structure, screenshots, chat messages. No credentials.United States, standard contractual clauses. EU inference region Roadmap
OpenAIAssertion checks and assisted authoringPage content and screenshots for the assertionUnited States, standard contractual clauses. EU inference region Roadmap
Amazon Web ServicesEvidence storageScreenshots, video, traces, console and network logsEU
Cloud browser providerRuns the browser that the agent drivesEverything the browser shows, with the session recordingEU
Sandbox providerRuns your Playwright tests in isolationThe test script and its runtime environmentEU. A single payload larger than 2 MiB is written to object storage in the United States. All payloads in the EU Roadmap
Agent observability providerDiagnostic traces of agent runsPage structure and screenshotsEU

Platform subprocessors

SubprocessorPurposeWhat it receivesLocation
Application hosting providerHosting of the web applicationApplication trafficEU
Worker hosting providerHosting of the agent worker and the realtime gatewayAgent traffic and progress eventsEU (Frankfurt, Germany)
Database providerDatabaseTest cases, results, agent conversationsEU
Realtime providerLive progress streamingProgress eventsEU
Error monitoring providerError monitoringTechnical logsEU
Job orchestration providerBackground jobsJob metadataUnited States, standard contractual clauses. EU region Roadmap
Authentication providerSign-inName, work emailUnited States, standard contractual clauses. EU region Roadmap
Billing providerPaymentsBilling contact, payment methodUnited States, standard contractual clauses. EU region Roadmap
Email providerTransactional emailEmail address, report contentUnited States, standard contractual clauses. EU region Roadmap
PostHogProduct analytics and session replay in the applicationUsage events. Session replay with all text masked and all media blocked.Ask us at privacy@vikingqa.io
CrispSupport chat in the applicationName, work email and the messages you send usAsk us at privacy@vikingqa.io

Use your own model provider

You can choose where AI inference runs. Use our default providers, bring your own contract with a model provider, or connect a private deployment. Talk to us at privacy@vikingqa.io. A provider that you bring is your own processor and does not appear on this list.

An EU region as the default for AI inference is on our roadmap.

Get notified before the list changes.

Write to privacy@vikingqa.io and we send you the current list and every change, 30 days before it takes effect.