Data Processing Agreement & Sub-processors

Last updated: July 2026

1. Roles

For personal data you submit for verification and account data, you (the customer) are the data controller and VerifyBuddy is the data processor. We process personal data only on your documented instructions and for the purpose of providing the service.

2. Our Commitments

Process personal data only to provide and secure the service.
Ensure personnel are bound by confidentiality.
Apply appropriate technical and organisational security measures (encryption in transit and at rest, access controls, audit logging).
Assist you with data-subject requests (access, export, erasure) via the tools in Settings.
Notify you without undue delay after becoming aware of a personal-data breach.
Delete or return personal data at the end of the service, subject to legal retention requirements.

3. International Transfers

Where personal data is transferred outside the EEA/UK to a sub-processor, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

4. Sub-processors

We engage the following sub-processors to deliver the service. We remain responsible for their compliance and will give notice of material changes.

Sub-processor	Purpose	Location
Contabo GmbH	Cloud hosting & infrastructure (application, database, cache)	Germany (EU)
Stripe, Inc.	Payment processing	USA
PayPal Holdings, Inc.	Payment processing	USA
Razorpay Software Pvt. Ltd.	Payment processing (India)	India
Resend, Inc.	Transactional email delivery	USA
Anthropic, PBC	AI support-chat assistant (messages you send to the assistant)	USA

5. Requesting a Signed DPA

Enterprise customers who require a signed Data Processing Agreement can request one from privacy@verifybuddy.com. See also our Privacy Policy and Terms of Service.