This page lists the third-party companies (“subprocessors”) that VeriScout ApS uses to deliver the VeriScout Service. Each subprocessor processes personal data on our behalf under a written data-processing agreement and only as needed for the purpose described.
This page supplements our Privacy Policy and our Data Processing Agreement.
Current subprocessors
| Subprocessor | Purpose | Entity / location of processing | Transfer mechanism |
|---|---|---|---|
| Amazon Web Services EMEA SARL | Cloud hosting, storage, databases, content delivery and infrastructure logging for the VeriScout platform | AWS EMEA SARL, Luxembourg — processing region: Frankfurt, Germany (eu-central-1) | EU — within the EEA. AWS Standard Contractual Clauses for any incidental support access from outside the EEA. |
| Google Ireland Limited (Google Workspace) | Operating the Hello@veri-scout.com inbox and sending account, support and transactional email; spam filtering and delivery logging | Google Ireland Limited, Dublin, Ireland — processing across Google's global infrastructure under EU data-region settings where available | EU–US Data Privacy Framework (Google LLC is certified) and EU Standard Contractual Clauses for any onward transfers |
| Stripe Payments Europe, Limited | Issuing invoices, processing card and SEPA payment of subscription fees, fraud screening, and payment-method storage at Stripe (VeriScout does not store full card numbers) | Stripe Payments Europe, Limited, Dublin, Ireland; Stripe, Inc. as group affiliate in the United States | EU–US Data Privacy Framework (Stripe, Inc. is certified) and EU Standard Contractual Clauses |
We do not currently use any third-party error-tracking, application-performance-monitoring, session-replay or product-analytics tools. Operational logs are kept within our AWS environment in Frankfurt.
What about advisers?
Our accountants, auditors and external lawyers may receive personal data on a confidential basis where reasonably necessary to provide professional services. They act as independent controllers under their professional rules rather than as our subprocessors and so are not listed in the table above.
How we add or change a subprocessor
Before engaging a new subprocessor or replacing an existing one for processing of Customer Personal Data:
- We update this page.
- We notify subscribed Customers by email at least 30 days before the change takes effect.
- Customers may object on reasonable data-protection grounds within that 30-day window. If the concern cannot be resolved, the Customer may terminate the affected subscription and receive a pro-rata refund of pre-paid, unused fees, as set out in the Data Processing Agreement.
Subscribe to subprocessor change notifications
To be added to the change-notification mailing list, email Hello@veri-scout.com with the subject line “Subprocessor notifications — subscribe” and the name of your organisation. We will confirm by reply.
You can unsubscribe at any time by emailing the same address with “Subprocessor notifications — unsubscribe”.