Sub-processor List
Version 2.0 · Last updated 15 October 2026 · Applies to new accounts from 15 October 2026 and to existing account holders from 16 November 2026
Euverify Ltd and Euverify Limited use the following sub-processors and subcontractors to provide our websites, platforms and services. Where a provider is located outside the United Kingdom or the European Economic Area, personal data is transferred under the mechanism shown. We give account administrators at least 30 days’ notice by email or platform notice before adding or replacing a sub-processor that processes customer data; objections on reasonable data-protection grounds may be sent to gdpr@euverify.com within that period, as set out in section 5 of our Data Processing Addendum.
Transfer mechanisms
- Adequacy — the provider processes data in the UK or the EEA, or in a country covered by a UK or EU adequacy decision.
- DPF — the provider is certified under the EU-US Data Privacy Framework and its UK Extension.
- SCCs + UK Addendum — European Commission Standard Contractual Clauses and the UK International Data Transfer Addendum.
Subcontractor with access to customer data
| Name | Purpose | Country | Transfer mechanism |
|---|---|---|---|
| Sweans Technologies Private Limited | Engineering, platform support and back-office services for Euverify under a written subcontract | India | SCCs + UK Addendum |
Platform hosting and infrastructure
| Name | Purpose | Country | Transfer mechanism |
|---|---|---|---|
| Render | Cloud hosting of the platforms | Germany (EU hosting); US company | Adequacy; DPF for any US access |
| Supabase | Database and authentication | United Kingdom (hosting); Singapore company | Adequacy; SCCs + UK Addendum for any access from outside the UK/EEA |
| Cloudways | Website hosting | United Kingdom | Adequacy |
| Cloudflare | Content delivery and security | USA | DPF |
| GitHub | Source code management | USA | DPF |
| Sentry | Error tracking | Germany (EU hosting); US company | Adequacy; DPF for any US access |
| New Relic | Performance monitoring | USA | DPF |
| Browserless.io | Browser automation | USA | SCCs + UK Addendum |
Payments, signatures and communications
| Name | Purpose | Country | Transfer mechanism |
|---|---|---|---|
| Stripe | Payment processing | Ireland / UK / USA | Adequacy; DPF for US processing |
| PayPal | Payment processing | Luxembourg / UK | Adequacy |
| DocuSeal | Electronic signature of agreements | Ireland (EU hosting); US company | Adequacy; SCCs + UK Addendum for any US access |
| YouSign | Electronic signature | France | Adequacy |
| Postmark | Transactional email | USA | DPF |
| Mailercloud | Email delivery and campaigns | Germany (EU hosting); Indian company | Adequacy; SCCs + UK Addendum for any access from India |
| Instantly | Outbound email campaigns (business contacts) | USA | SCCs + UK Addendum |
| Intercom | Customer support chat and help centre | Ireland / USA | Adequacy; DPF for US processing |
| Zoom | Video meetings | USA | DPF |
| Google Meet / Google Workspace | Video meetings, email and collaboration | Ireland / USA | Adequacy; DPF for US processing |
| Calendly | Meeting scheduling | USA | DPF |
| TidyCal | Meeting scheduling | USA | SCCs + UK Addendum |
AI-assisted document review, translation and automation
| Name | Purpose | Country | Transfer mechanism |
|---|---|---|---|
| OpenAI | AI-assisted document review, classification and automation (no training on our inputs) | USA / Ireland | DPF / SCCs + UK Addendum |
| Anthropic (Claude) | AI-assisted document review and automation (no training on our inputs) | USA / Ireland | DPF / SCCs + UK Addendum |
| Google Gemini | AI-assisted product and document audits (no training on our inputs) | Ireland / USA | Adequacy; DPF for US processing |
| DeepL | Document translation | Germany | Adequacy |
| Apify | E-commerce listing data extraction | Czech Republic | Adequacy |
| ISBNdb | Book metadata lookup | USA | SCCs + UK Addendum |
| Zephira.ai (Global Data Intelligence Limited) | Company data verification: retrieval of official company registry records for business verification | United Kingdom; support from Moldova and service providers that may be outside the UK/EEA, including the USA | Adequacy; SCCs + UK Addendum for transfers outside the UK/EEA |
| Grammarly | Writing assistance (staff use) | USA | DPF |
Analytics, advertising and website tools
| Name | Purpose | Country | Transfer mechanism |
|---|---|---|---|
| Google Analytics (GA4), Google Tag Manager, Google BigQuery, Google Ads, Google reCAPTCHA | Website analytics, tag management, data analysis, advertising, fraud prevention | Ireland / USA | Adequacy; DPF for US processing |
| Stape.io | Server-side tagging infrastructure | Estonia / France | Adequacy |
| Hotjar | User behaviour analytics | Malta | Adequacy |
| Microsoft Clarity and Bing Ads | Website analytics and advertising | Ireland / USA | Adequacy; DPF for US processing |
| Meta, LinkedIn, X, Taboola | Advertising (subject to cookie consent) | Ireland / USA | Adequacy; DPF / SCCs for US processing |
| CookieYes | Cookie consent management | United Kingdom | Adequacy |
| Trustpilot | Customer reviews | Denmark | Adequacy |
| Wistia / YouTube | Video hosting | USA | DPF |
| ipinfo.io, freeipapi.com | Approximate geolocation from IP address | USA (ipinfo.io); Germany (freeipapi.com) | SCCs + UK Addendum (ipinfo.io); Adequacy (freeipapi.com) |
Sales, CRM and operations
| Name | Purpose | Country | Transfer mechanism |
|---|---|---|---|
| Attio | CRM | United Kingdom | Adequacy |
| LinkedIn Sales Navigator | Sales intelligence (business contacts) | Ireland / USA | Adequacy; DPF for US processing |
| ClickUp | Project and task management | USA | DPF |
| FirstPromoter | Affiliate programme management | Germany | Adequacy |
| Shopify | Online shop (shop.euverify.com) | Canada / Ireland | Adequacy |
Questions about this list: gdpr@euverify.com