Velaris
Partially CompliantUK AI-driven customer success platform covering health scores, playbooks and churn prevention, from MANANTIAL LTD in Wantage, with named EU sub-processors in its Data Processing Addendum.
Subject to the US CLOUD Act: a US parent company can be compelled to disclose data it holds, including data stored in the EU.
Paid
GDPR Compliance Data
Not independently verified| GDPR Status | Partially Compliant |
| HQ Country | United Kingdom |
| Ownership | Non-European |
| Foreign Disclosure Exposure | US CLOUD Act / FISA 702 |
| Data Hosting Location | European Union"The Customer Data is fully hosted on Amazon Web Services and Velaris adheres to all Amazon Web Services security best practices" and, in Annex B (Approved Sub-processors): "Amazon Web Services (EMEA) SARL, 38 Avenue John F. Kennedy, Luxembourg 1855, Luxembourg -- Hosting provider" (velaris.io/data-processing-addendum, read raw 2026-09-07). The separate privacy policy states only that data is "stored within the Territory" (defined elsewhere as the United Kingdom) absent a transfer, and the security portal names hosting only as "Amazon Web Services (AWS)" with no region. |
| EU Servers Available | |
| Data Processing Agreement | View DPA |
| Sub-processor List | Not verified |
| Schrems II Risk | Medium Risk |
| SCCs in Place | |
| Last Verified | 7 September 2026 |
How we reached this
UK legal entity: MANANTIAL LTD, doing business as Velaris, incorporated under the laws of England and Wales, company number 13088838, named in both the privacy policy and terms of service, read raw 2026-09-07. PARTIAL rather than COMPLIANT because the two governing documents don't agree: the privacy policy's own data-location promise is scoped to the UK "Territory," while the Data Processing Addendum's Annex B names Amazon Web Services (EMEA) SARL, Luxembourg as hosting provider, Anthropic Ireland, Limited for AI-generated insights, and Tinybird Labs, Madrid for analytics, with full EU/UK Standard Contractual Clauses annexed. dataHostingLocation is recorded as EU on the strength of the DPA's specific, named claim, but the ambiguity against the privacy policy's UK-only language is the reason this isn't rated higher. dpaEvidence PUBLISHED: the DPA including its SCC annexes is a full public page rather than a document available only on request. sccInPlace true from the same annexed clauses. extraterritorialExposure US_CLOUD_ACT and schremsIIRisk MEDIUM because the named sub-processors, AWS and Anthropic, are both US companies regardless of which EU or Irish subsidiary is the named contracting entity; the CLOUD Act reaches data through corporate ownership, not only through physical location, the same reasoning applied to Vainu and SEO.AI. ownershipOrigin NON_EU: the UK is a third country under GDPR, not an EU member state, so a UK-incorporated vendor is rated the same way EmailOctopus, Dotdigital, Red Sift, RedEye and Mailercloud are on this site regardless of the quality of its documentation. Velaris also has an engineering/delivery office in Sri Lanka, which is a staffing detail, not a change to the incorporating jurisdiction. Quote-only pricing; no published starting price.
About Velaris
A Gainsight-Shaped Platform From a Much Smaller Company
Velaris was founded in 2020 and has raised roughly €4.7M, which places it well below Gainsight's scale but gives it enough runway to build a genuinely full platform rather than a thin wrapper. Engineering and delivery run partly out of a Sri Lanka office alongside the UK headquarters, which is a normal SaaS staffing pattern and does not change where the company is incorporated or who controls it.
The Four Modules
- View: account and contact management with AI-generated summaries and a customer 360, including custom objects
- Analyze: health scoring, surveys, reporting dashboards, and AI-driven conversation analysis with sentiment scoring
- Orchestrate: workflow automations and email campaigns for proactive outreach
- Execute: playbooks, success plans and task management
Velaris also sells a separate Customer Portal for onboarding and a support-ticket product with an embedded AI agent, both add-ons to the core platform.
Pricing Is Quote-Only
The pricing page states "All the tools you need in one license. 5 users. Unlimited viewers. Add-ons available," with no published figure; every plan requires a custom estimate from sales. That puts evaluation a call behind Skalin and Akita, both of which at least publish a starting number.
Two Documents, Two Different Answers on Hosting
This is the detail worth reading closely if data location matters to you. Velaris's privacy policy is vague, promising only that data stays "within the Territory" (defined as the United Kingdom) absent a transfer. Its separate Data Processing Addendum is much better: Annex B names Amazon Web Services (EMEA) SARL in Luxembourg as hosting provider, Anthropic Ireland, Limited for AI-generated insights, and Tinybird Labs in Madrid for analytics, with the full EU/UK Standard Contractual Clauses annexed to the document itself. The security portal separately describes hosting only as "Amazon Web Services (AWS)," no region given.
Read together, the DPA is the strongest evidence and points to EU (Luxembourg) hosting, but the privacy policy's own language about the UK "Territory" doesn't fully square with that, so this listing rates the gap as PARTIAL rather than resolving it in Velaris's favour. Because the ultimate hosting and AI-processing providers, AWS and Anthropic, are US companies regardless of the EU or Irish entity actually holding the contract, US_CLOUD_ACT exposure applies the same way it does for Vainu on AWS or SEO.AI on AWS.
The Company
MANANTIAL LTD, trading as Velaris, incorporated in England and Wales, company number 13088838. UK incorporation means UK jurisdiction rather than EU membership: the same distinction that applies to EmailOctopus and every other UK vendor on this site.
Where It Fits
Against Gainsight, the category incumbent Velaris is positioned to unseat: Velaris is smaller, less proven at enterprise scale, and quote-only on price, but ships a comparable module set with better sub-processor transparency than most vendors this size manage. See also Skalin and Akita in customer success, both smaller still and both EU-incorporated.
Key Features
Pros & Cons
Categories
Replaces
Velaris GDPR & data protection: common questions
Is Velaris GDPR compliant?
Partly. Velaris meets some of the requirements, with caveats worth reading before you commit. Velaris is based in United Kingdom, outside the EU/EEA, data is hosted within the European Union, and a Data Processing Agreement is published.
Where does Velaris store data?
Velaris states: ""The Customer Data is fully hosted on Amazon Web Services and Velaris adheres to all Amazon Web Services security best practices" and, in Annex B (Approved Sub-processors): "Amazon Web Services (EMEA) SARL, 38 Avenue John F. Kennedy, Luxembourg 1855, Luxembourg -- Hosting provider" (velaris.io/data-processing-addendum, read raw 2026-09-07). The separate privacy policy states only that data is "stored within the Territory" (defined elsewhere as the United Kingdom) absent a transfer, and the security portal names hosting only as "Amazon Web Services (AWS)" with no region.". Data is hosted within the European Union.
Does Velaris offer a Data Processing Agreement (DPA)?
Yes. Velaris publishes a DPA at https://www.velaris.io/data-processing-addendum. A DPA is required under Article 28 GDPR whenever a provider processes personal data on your behalf.
What a DPA has to cover →Is Velaris a European company?
No. Velaris is based in United Kingdom, outside the EU/EEA. It may still be a sound choice (EU hosting and a signed DPA matter more than a flag) but the ownership is not European.
Is Velaris subject to the US CLOUD Act?
Yes. US authorities can compel disclosure of data held by a US company or its subsidiaries, regardless of the country the servers sit in. EU hosting alone does not remove this, the question is who controls the data, not where the disk is. Standard Contractual Clauses are in place for transfers, which is the required safeguard but does not override a lawful US order.
Schrems II compliance checklist →Related Tools
Planhat
Swedish customer success platform for health tracking, renewals, and revenue reporting. Gartner Leader.
Custify
Romanian customer success platform for B2B SaaS with health scores and automated playbooks.
Skalin
French AI-powered customer success platform built for small CS teams (1-15 people) at early-stage B2B SaaS companies, publishing a single all-inclusive price and an explicit EU-only hosting claim.
Spotted something wrong?
Martech moves fast. Vendors change hosting regions, get acquired, publish a new DPA or rewrite their pricing, and they rarely announce it. We check what we publish and date every compliance review, but some of what you see here will be out of date before we catch it.
If you work at Velaris and something on this page is wrong, tell us and we will fix it. Readers, same invitation. Pointing us at the page that proves it gets it changed fastest.