Sub-processors · VerifyPro

30 days' notice, every time.

Adding a sub-processor, or changing the data it receives or the country it processes in, triggers email to every organisation's billing and security contacts at least 30 calendar days before it may receive any data. You may object in writing during that window; we will exclude your organisation where that is technically possible, and where it is not you may terminate with a pro-rata refund of unused paid credits and prepaid subscription, with no early-termination charge. Objections go to privacy@verifypro.example.

Email delivery

1 entry

email_delivery sub-processors
Name	Purpose	Data received	Country	Transfer basis	Source
Amazon Web Services EMEA SARL (SES) since 2026-01-01	Transactional email: sign-in, job completion and billing notices.	Account holder name and email address. No verification data.	IE	No transfer (processed in region)	Register

Infrastructure

2 entries

infrastructure sub-processors
Name	Purpose	Data received	Country	Transfer basis	Source
Hetzner Online GmbH since 2026-01-01	Application and database hosting; verification server fleet.	All customer data at rest and in transit, including email addresses submitted for verification.	DE	No transfer (processed in region)	Register
Cloudflare, Inc. since 2026-01-01	DNS, TLS termination, DDoS protection and edge caching.	Request metadata and IP addresses; no verification payloads at rest.	US	EU SCCs 2021/914 · Module Three	Register

Payments

1 entry

payment sub-processors
Name	Purpose	Data received	Country	Transfer basis	Source
Stripe Payments Europe, Ltd. since 2026-01-01	Card processing, invoicing and tax evidence.	Billing contact, billing address, payment instrument tokens. No verification data.	IE	No transfer (processed in region)	Register

Your addresses do not leave by default

Third-party verification is opt-in per organisation and defaults to deny. While it is denied, no backup provider ever receives one of your addresses — not in bulk, not as a single spot check. A verification that could only have been completed by a backup provider returns an honest unknown instead, and that row is not billed.