Subprocessors

Effective date: April 1, 2026

Last updated: July 18, 2026

This page is the single, canonical source of truth for the subprocessors Verifex engages to help operate the service. Verifex is operated by Sadat Nazarli, operating Verifex (Azerbaijan). Where a transfer or DPA detail is not yet confirmed, the relevant cell reads "Under review."

VendorPurposeData categoryRegionTransferPrivacy policyDPAEffective
Hetzner Online GmbHHosting (EU VPS)All app data at restGermany/Finland (EU)EU (no transfer)PolicyAvailable2026-07-18
Lemon Squeezy LLCPayments / billingCustomer email, subscription dataUnited StatesSCCs (under review)PolicyAvailable2026-07-18
Resend (Plus Five Five, Inc.)Transactional emailRecipient email, message contentUnited StatesSCCs (under review)PolicyAvailable2026-07-18
Hostinger International LtdEmail (SMTP/IMAP)Recipient email; inbound email content received at operational inboxes (may include support messages)Lithuania/EUEUPolicyUnder review2026-07-18
Anthropic PBCOptional AI — adverse-media screening (opt-in, Growth plan and above)Names, entity context, article textUnited StatesSCCs / commercial API terms (under review)PolicyAvailable (commercial)2026-07-18
The GDELT ProjectOptional adverse-media news retrieval (opt-in, used with the adverse-media feature)Screened entity name, submitted as a news-search queryUnited StatesUnder reviewPolicyUnder review2026-07-18
UK Companies HouseOptional UK company (KYB) lookup (opt-in, paid plans)Company name / registration number submitted for KYBUnited KingdomUK (adequacy)PolicyPublic registry2026-07-18
Sentry (Functional Software, Inc.)Error monitoring (optional; not currently enabled in production)Error type + stack location; Sentry is configured to minimize and redact customer data (request body/query/URL, user, breadcrumbs, contexts, tags, exception messages, cookies and credentials are dropped or redacted before sending)United StatesSCCs (under review)PolicyUnder review2026-07-18
Slack TechnologiesIncident alerting (optional)Technical error metadataUnited StatesSCCs (under review)PolicyUnder review2026-07-18

Change notice

We give 30 days' notice of new subprocessors where contractually required, so that customers can review and, where their agreement provides for it, object.

Data residency

Primary application data is hosted in the European Union. Some optional and operational providers are located in the United States or operate internationally, as shown above. Verifex does not currently offer data residency outside the EU.

Not legal advice. This page is provided for transparency and may change as our infrastructure evolves. Related pages: Privacy, GDPR, DPA, and Security.