Sub-processors

Last updated: 14 July 2026

To run VerdLynx we rely on a small number of third-party providers who process data on our behalf. This page lists them, what each one handles, and where. It supplements our Privacy Policy and the data-processing terms we make available to customers.

Sub-processor	Purpose	Data processed	Location
Supabase	Database, authentication, and file storage — the core platform.	Account and user records, and all uploaded compliance documents (certificates, declarations, artwork, supplier files).	European Union (Paris)
Vercel	Application hosting and server functions.	Requests and processing in transit; no primary data store. Server functions run in the EU region.	European Union (Paris region); US-based provider
Stripe	Subscription billing and payments.	Billing contact (name, email), company/VAT details, and payment method. Card data goes directly to Stripe — VerdLynx never sees or stores it.	United States (SCCs)
Anthropic	AI extraction and analysis (reading certificates, checking artwork markings, drafting declarations).	The content of documents you submit for a check, at the moment of processing. Not used to train models; not retained by us for training.	United States (SCCs)
Resend	Transactional email (sign-in, reminders, billing notices).	Recipient email addresses and the content of those emails.	United States (SCCs)
Sentry (Functional Software, Inc.)	Error monitoring — capturing application crashes so we can fix them.	Technical error reports: stack traces, request URLs, browser/OS, and IP address at the moment of an error. No uploaded compliance documents.	European Union (EU data residency region)

International transfers

Your core application data — the database and uploaded files — is stored in the European Union. Where a sub-processor is based outside the EU (Stripe, Anthropic, Resend), transfers are covered by the European Commission’s Standard Contractual Clauses and each provider’s own transfer safeguards.

AI processing

When you run a check, the relevant document content is sent to Anthropic for that request only. It is not used to train any model and is not retained by us for training. See our Security page for more.

Changes to this list

We keep this page current. If we add or replace a sub-processor that handles customer data, we’ll update this page; customers with a data-processing agreement can request advance notice of material changes. Questions: contact@verdlynx.com.