VerifyStack uses the following third-party service providers ("subprocessors") to help deliver our Services. Each subprocessor is bound by data protection agreements and maintains appropriate security certifications.

Current Subprocessors

Vercel

Purpose:

Application hosting and edge compute

Location:

United States (global edge)

Compliance:

SOC 2 Type IIGDPRCCPA

Neon (Vercel Postgres)

Purpose:

PostgreSQL database hosting

Location:

United States (multi-region)

Compliance:

SOC 2 Type IIGDPRHIPAA eligible

Upstash

Purpose:

Redis-compatible key-value storage

Location:

United States (global regions)

Compliance:

SOC 2 Type IIGDPR

MaxMind

Purpose:

IP geolocation and fraud signals

Location:

United States

Compliance:

SOC 2 Type IIGDPRCCPA

AWS S3

Purpose:

Backup and archival storage

Location:

United States (eu-west-1 available)

Compliance:

SOC 2 Type IIGDPRHIPAAISO 27001

Change Notifications

We will notify customers of any changes to our subprocessors at least 30 days before the change takes effect. Notifications are sent via email to the account owner.

To subscribe to subprocessor change notifications or to object to a new subprocessor, contact privacy@verifystack.io.

Data Processing Agreement

Enterprise customers can request a Data Processing Agreement (DPA) that includes Standard Contractual Clauses (SCCs) for international data transfers.

Contact legal@verifystack.io to request a DPA.