Sub-processors
In short
- We use a small number of specialist providers to run the platform and reach verification sources.
- Where a provider is publicly discoverable from how the service runs, we name it directly; the rest of the supplier mix is commercially confidential.
- Each is bound by data-protection terms no less protective than our own.
- Enterprise subscribers under NDA can request the named list.
1. What a sub-processor is
A sub-processor is a third party that processes personal data on our behalf to deliver the service. This page supports clause 6 of the Data Processing Addendum.
2. Current categories
| Function | Purpose | Data involved | Typical region |
|---|---|---|---|
| Cloud hosting and compute | Running the application and its background verification jobs | All service data in transit and at rest | EU / North America |
| Managed database, storage and authentication | Storing accounts, company and founder records, uploaded documents and reports | Account data, founder-submitted data, documents, results | EU / North America |
| Screening | Sanctions, PEP, adverse-media, criminal-record and insolvency screening | Name, date of birth, nationality and country of residence | EU / UK / North America |
| Company registers and professional-history search | Official company-register lookups (UK Companies House, GLEIF, national registers) for directorships, officer roles and company records | Name variants, jurisdictions, company names | EU / UK / North America |
| Public-record and web collection | Retrieving company registry, intellectual-property, publication, press and public profile records | Name variants, date of birth, country, company identifiers | EU / North America |
| AI processing | Extracting claims from uploaded decks and summarising evidence | Document text, verification results | EU / North America |
| Transactional email | Founder invitations, notifications and report delivery | Name, email address, report links | EU / North America |
| Payments | Stripe — subscription and per-verification billing | Subscriber billing details; we do not store full card numbers | EU / North America |
| Product analytics and error monitoring | Diagnosing faults and measuring reliability | Technical and usage data, IP address | EU / North America |
| Customer support tooling | Handling enquiries, corrections and disputes | Correspondence and account identifiers | EU / North America |
3. Which names are listed here
Where a provider is already publicly discoverable from how the service is delivered, we name it directly. The rest of our supplier mix is part of how the product works and is not shown to investors inside reports. Enterprise subscribers and regulators can request the full named list, with regions and transfer mechanisms, under confidentiality by emailing us.
4. Changes
We update this page when a category is added or removed, and notify subscribers of material changes so they can object on reasonable data-protection grounds.