Skip to main content
All CollectionsLegal
Sub-processors used by Veriff
Sub-processors used by Veriff
Debi avatar
Written by Debi
Updated over a month ago

What makes those entities a sub-processor?

These entities are named as sub-processors as they access end-users' personal data on behalf of Veriff to assist us with our services' provision to our Customers.

Veriff is committed to ensuring that all the sub-processors have the appropriate legal and security safeguards in place to ensure that data will remain protected. This includes signing a data processing agreement (together with Standard Contractual Clauses, where applicable) with all of our sub-processors and ensuring they all have supplementary measures in place, where applicable.

Default sub-processors for Veriff’s service provision

Google Cloud EMEA, a company incorporated under the laws of Ireland, with offices at Gordon House, Barrow Street, Dublin 4, Ireland

  • What does the sub-processor do? Provides media processing services.

  • What is the primary processing location? EEA.

Amazon Web Services EMEA SARL, a company incorporated under the laws of Ireland, with offices at One Burlington Plaza, Burlington Road, Dublin 4, Ireland

  • What does the sub-processor do? Provides storage, computing and media processing.

  • What is the primary processing location? EEA.

Twilio Ireland Limited, a company incorporated under the laws of Ireland, with offices at 25-28 North Wall Quay, Dublin 1, Ireland

  • What does the sub-processor do? Provides end-user communication solutions (inc. mobile fallback).

  • What is the primary processing location? EEA, storage in the US. End-user’s phone number may be transferred to a third country if the end-user is using a third country’s mobile network.

Messente Communications OÜ, a company incorporated under the laws of Estonia, with registered office at Akadeemia tn 3, 51003 Tartu, Estonia

  • What does the sub-processor do? Provides end-user communication solutions (inc. mobile fallback).

  • What is the primary processing location? EEA. End-user’s phone number may be transferred to a third country if the end-user is using a third country’s mobile network.

Hotjar Limited, a company incorporated under the laws of Malta, with registered office at Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta.

  • What does the sub-processor do? Facilitates fixing bugs and improving customer's UX (user experience).

  • What is the primary processing location? EEA but may process data also in the US.​

Intercom R&D Unlimited Company, an Irish company with offices at 2nd Floor, Stephen Court, 18-21 St. Stephen’s Green, Dublin 2, Republic of Ireland.

  • What does the sub-processor do? Provides technical solution for our customer support communications.

  • What is the primary processing location? US. Note that email communications may be in transit over the (global) Internet and may be processed by email processing servers hosted globally.

EXLService (Ireland) Limited, a company incorporated under the laws of Ireland, with offices at One Spencer Dock, North Wall Quay, Dublin 1, Ireland

  • What does the sub-processor do? Provides review support for verification services.

  • What is the primary processing location? India.

Veriff’s group entities:

Veriff Spain S.L., a company incorporated under the laws of Spain, with registered office at Avenida Diagonal 123, 00805 Barcelona, Spain

Veriff UK Ltd, with registered address at 9th Floor, 107 Cheapside, London, EC2V 6DN, United Kingdom

Veriff Inc., with registered address at 251 Little Falls Drive Wilmington, New Castle County Delaware 19808-1674 State of Delaware, United States

  • What do the sub-processors do? Provide functions for Veriff’s identity verification service provision.

  • What are the primary processing locations? Data storage in EEA (Ireland). Processing in the EEA, the UK and the US.

Conditional sub-processors used only if the Customer purchases certain services and features

IVXS UK LTD, trading as COMPLYADVANTAGE, with company number 08964733 whose registered office is 9th Floor Newcombe House, 43-45 Notting Hill Gate, London W11 3LQ, United Kingdom

  • What does the sub-processor do? PEP and sanctions functionalities, if provided to the Customer.

  • What is the primary processing location? UK and Ireland.

London Stock Exchange Group plc, 10 Patermoster Square, London EC4M 7LS, United Kingdom

  • What does the sub-processor do? Information verification against external data sources, e.g. local authorities' registries.

  • What are the primary processing locations? EEA. End-user’s verification information may be transferred to a third country if data needs to be checked outside of the EEA.

    Services formerly provided by Global Data Consortium, Inc., a North Carolina Corporation with offices at 1101 Haynes Street, Suite 109 Raleigh, NC, USA, 27604

Ocrolus, Inc., with registered address at 101 Greenwich Street, Fl. 23, New York, New York 10006, USA

  • What does the sub-processor do? Proof of address extraction.

  • What are the primary processing locations? India and USA.

Surepass Technologies Private Limited, (CIN: U72900DL2019PTC349962) a company incorporated under the laws of India located at Shop No. 38 Lehna Singh Market, Malka Ganj, Delhi, Delhi 110007

  • What does the sub-processor do? Information verification against local authorities' data source.

  • What are the primary processing locations? India.

Nufi Inc., a company incorporated under laws of Delaware, with EIN number 87-1278783, with a registered address 2803 Philadelphia Pike, Ste B PMB 685, Claymont, DE, USA, 19703

  • What does the sub-processor do? Information verification against external data sources, e.g. Mexico local authorities' registries.

  • What are the primary processing locations? USA and Mexico.

FIMPE Fideicomiso F/00185, a company incorporated under the laws of Mexico, with address at Louisiana No. 58, Colonia Nápoles, Alcaldía Benito Juárez, CP. 03810, Ciudad de México

  • What does the sub-processor do? Information verification against external data sources, e.g. Mexico local authorities' registries.

  • What are the primary processing locations? Mexico.

Data Innovation S.A.S., with registered address at Calle 25B #39a-30, Bogota D.C., Colombia

  • What does the sub-processor do? Information verification against local authorities' data source.

  • What are the primary processing locations? Colombia and USA.

Did this answer your question?