Legal
Subprocessors & data residency.
Who processes what, where, and why. DPA templates are available on request.
Subprocessors
Current subprocessors
| Subprocessor | Purpose | Location |
|---|---|---|
| IONOS | Dedicated VPS hosting | United States |
| Resend | Transactional email delivery | United States |
| Lemon Squeezy | Payment processing & billing | United States |
| Google Analytics | Website analytics (anonymized) | United States |
Data residency
Where data lives
Screening data, audit logs, and customer records are stored on dedicated infrastructure in the United States (IONOS). We do not currently offer EU data residency. If your regulator requires EU data storage, Verifex may not be suitable today.
DPA
Data Processing Agreement
A DPA template is available on request for Enterprise customers. It covers GDPR Article 28 obligations, subprocessor governance, breach notification, and data deletion procedures. The template has not been reviewed by external counsel — customers should have their legal team review it before execution.
Not legal advice. This page is for informational purposes. The subprocessor list changes as our infrastructure evolves. Enterprise customers will be notified of material subprocessor changes with 30 days notice where contractually required.