Subprocessors
Verdacert LLC uses the service providers below to operate the Services. Each is bound by a written agreement that restricts it to our instructions, requires appropriate safeguards, and prohibits it from using customer content to train artificial-intelligence models. This list is incorporated into our Privacy Policy (Section 4) and the Terms of Service (Section 11), and is the current list for any Data Processing Agreement or Business Associate Agreement we sign.
| Provider | Purpose | Processing location | Data it receives |
|---|---|---|---|
| Vercel, Inc. | Application hosting, serverless compute, web analytics (cookieless) | United States | All application data in transit; page URLs |
| Neon, Inc. | Primary database (Postgres) | United Kingdom (AWS eu-west-2, London) | Account, order, translation text, certificate and log records |
| Cloudflare, Inc. (R2) | Document object storage and content delivery | Global network; objects stored in Cloudflare's R2 storage | Uploaded source documents, draft and certified PDFs, firm logos |
| Stripe, Inc. | Payments, invoicing, sales-tax calculation, fraud prevention | United States | Name, email, phone, billing and shipping address, payment method (never stored by us) |
| Resend, Inc. | Transactional and account email delivery | United States | Email address, name, order metadata in messages |
| Anthropic, PBC | AI translation drafting, extraction and review support | United States | Document images and text; no training on customer content (contractual) |
| OpenAI, L.L.C. | Embeddings and independent cross-checks of draft translations | United States | Extracted document text and draft translations; no training on customer content (contractual) |
| Microsoft Corporation (Azure AI Document Intelligence) | Page-layout analysis for layout-preserving certificates (optional) | United States (Azure region configured per deployment) | Document images |
| Google LLC (Google Tag Manager, Google Analytics 4, Google Ads) | Website analytics and advertising conversion measurement, subject to your cookie choices | United States | Pseudonymous usage data; no document content, no names or email addresses |
| Landearly | Applicant tracking for job applications (careers pages) | United States | Job-application data you submit on the job board |
Last updated: 2026-09-14
Human reviewers
Certified translations are reviewed and signed by individual human reviewers engaged by Verdacert under written confidentiality obligations. Reviewers work inside our platform, see only the documents they are qualified to review and are working on, and are not listed individually here.
Changes to this list
We update this page before a new subprocessor begins processing customer data and change the date above. Business customers with a signed DPA are notified by email at least 30 days before a new subprocessor is added and may object as described in that agreement.
Questions about a provider on this list: email privacy@verdacert.com.