Book a demo

Legal · Last updated: 26 October 2026

Sub-processors

These are the third parties that process personal data for us when we provide the Services. We announce changes on this page at least 30 days before they take effect, as described in our Data Processing Agreement. We also email the administrators of each customer account.

  1. 01Hetzner Online GmbH

    Purpose: hosting of the servers, databases and file storage that run the platform.
    Location: Germany (EU).
    Data: all Customer Data, including End User verification data.

  2. 02Resend, Inc.

    Purpose: delivery of service emails (panel invitations, password resets, payment receipts and billing notices) and contact form messages, and sending and receiving our business email.
    Location: United States.
    Data: panel users' email addresses and usernames, payment amounts and references in billing notices, the content of contact form messages, and the emails we exchange (addresses, subject, content and attachments). No End User verification data.

  3. 03jsDelivr and Google Cloud Storage

    Purpose: content delivery of the face-tracking components the WebSDK loads in the End User's browser for the liveness step.
    Location: global content delivery networks.
    Data: the End User's IP address and browser information as part of the download. No images or identity data are sent.

  4. 04Stripe Payments UK, Ltd. / Stripe, Inc.

    Purpose: card payments for balance top-ups, including cards saved for automatic top-ups.
    Location: United Kingdom, EU and United States.
    Data: the customer's company name, the card details entered on Stripe's payment page, payment amounts and the internal ID of the panel user who started the payment. No End User verification data. Stripe also acts as an independent controller for its own fraud-prevention and regulatory obligations.

  5. 05Anthropic, PBC

    Purpose: the optional AI Review Assistant, which drafts notes for analysts on sessions in manual review. Used only for customers who turn it on.
    Location: United States.
    Data: derived verification signals: check names, results, reason codes and scores. No images, biometric data, names, dates of birth or document numbers.

  6. 06Twilio Inc.

    Purpose: sending sign-in codes by SMS to panel users who choose SMS as their second sign-in step (Twilio Verify).
    Location: United States.
    Data: the panel user's mobile phone number. No End User verification data.

  7. 07Change history

    • 2026-10-26: Twilio added as a sub-processor for optional SMS sign-in codes for panel users.
    • 2026-10-15: Resend's purpose extended to sending and receiving our business email; no customer or End User verification data is involved.
    • 2026-10-09: Anthropic added as a sub-processor for the optional AI Review Assistant (off by default).
    • 2026-09-28: Stripe added as a sub-processor for card payments; the purpose of Resend extended to payment receipts and billing notices.

Important note

Public sanctions lists (such as the OFAC and UN lists) are downloaded to our servers; no personal data is sent to their publishers. This page is published in several languages for convenience; if the versions differ, the English version prevails.