Subprocessors
Effective date: April 1, 2026
Last updated: July 18, 2026
This page is the single, canonical source of truth for the subprocessors Verifex engages to help operate the service. Verifex is operated by Sadat Nazarli, operating Verifex (Azerbaijan). Where a transfer or DPA detail is not yet confirmed, the relevant cell reads "Under review."
| Vendor | Purpose | Data category | Region | Transfer | Privacy policy | DPA | Effective |
|---|---|---|---|---|---|---|---|
| Hetzner Online GmbH | Hosting (EU VPS) | All app data at rest | Germany/Finland (EU) | EU (no transfer) | Policy | Available | 2026-07-18 |
| Lemon Squeezy LLC | Payments / billing | Customer email, subscription data | United States | SCCs (under review) | Policy | Available | 2026-07-18 |
| Resend (Plus Five Five, Inc.) | Transactional email | Recipient email, message content | United States | SCCs (under review) | Policy | Available | 2026-07-18 |
| Hostinger International Ltd | Email (SMTP/IMAP) | Recipient email; inbound email content received at operational inboxes (may include support messages) | Lithuania/EU | EU | Policy | Under review | 2026-07-18 |
| Anthropic PBC | Optional AI (entity resolution, adverse media) | Names, entity context, article text | United States | SCCs / commercial API terms (under review) | Policy | Available (commercial) | 2026-07-18 |
| Telegram | Operational admin alerts (may include a customer email in payment alerts) | Operational metadata; a masked customer email (e.g. "a***@domain") in payment notifications | International | Under review | Policy | Under review | 2026-07-18 |
| Sentry (Functional Software, Inc.) | Error monitoring (optional) | Error type + stack location; Sentry is configured to minimize and redact customer data (request body/query/URL, user, breadcrumbs, contexts, tags, exception messages, cookies and credentials are dropped or redacted before sending) | United States | SCCs (under review) | Policy | Under review | 2026-07-18 |
| Slack Technologies | Incident alerting (optional) | Technical error metadata | United States | SCCs (under review) | Policy | Under review | 2026-07-18 |
Change notice
We give 30 days' notice of new subprocessors where contractually required, so that customers can review and, where their agreement provides for it, object.
Data residency
Primary application data is hosted in the European Union. Some optional and operational providers are located in the United States or operate internationally, as shown above. Verifex does not currently offer data residency outside the EU.
Not legal advice. This page is provided for transparency and may change as our infrastructure evolves. Related pages: Privacy, GDPR, DPA, and Security.