1. About this list
This page lists the sub-processors that may process Customer Personal Data on behalf of businesses using Verimly, and other providers that receive personal data in connection with the Service. We notify customers at least 30 days before adding or replacing a sub-processor, as described in the Data Processing Agreement. To receive these notices by email in addition to the notice in the back office, write to privacy@verimly.com.
2. Sub-processors
| Provider | Service | Data location | Transfer safeguard |
|---|---|---|---|
| Google Cloud EMEA Ltd (Ireland) | Application servers, database, cache, file storage, secret management and backups for the Verimly API and real-time service | EU: Netherlands (europe-west4) | Data stored in the EU. Any support access from outside the EEA under the EU–U.S. Data Privacy Framework and Standard Contractual Clauses |
| Vercel Inc. (USA) | Hosting and delivery of the web apps: website, back office, guest pages, business websites and staff portal | EU: Frankfurt, Germany (fra1) for compute; global edge network for static content | EU–U.S. Data Privacy Framework and Standard Contractual Clauses |
| ActiveCampaign, LLC — Postmark (USA) | Sending transactional email: sign-in codes and links, invitations, password resets, gift card deliveries, staff portal notifications | USA | EU–U.S. Data Privacy Framework and Standard Contractual Clauses |
| Bird B.V. — MessageBird (Netherlands) | Sending text messages: sign-in codes, gift card deliveries, staff portal notifications | EU | Not applicable (EU) |
| Anthropic Ireland, Limited (Ireland), with Anthropic, PBC (USA) | AI assistant in the back office and the agent (MCP) interface: the language model that writes answers and prepares changes for the user to confirm. Receives the user’s question and the data the user’s permissions allow the assistant to look up, with guest contact details masked | USA or other regions of Anthropic’s global inference service. We do not store data with Anthropic; Anthropic keeps inputs and outputs for a limited time (see the Privacy Policy) | EU Standard Contractual Clauses in Anthropic’s Data Processing Addendum. Anthropic does not train its models on this data under its commercial terms |
| Voyage AI Innovations, Inc. (USA), a MongoDB company | Search in the help centre for the AI assistant: converts help articles and the user’s question into numeric vectors (embeddings). Personal data is removed from the question first | USA | EU Standard Contractual Clauses (Decision 2021/914) in Voyage AI’s Data Processing Agreement. We configure the service so that submitted content is not used to train its models |
| komoot GmbH — Photon (Germany) | Address search when a business enters its own address or a location address | EU: Germany | Not applicable (EU). Only the typed search text is sent |
3. Providers acting under their own responsibility
| Provider | Role | When |
|---|---|---|
| Stripe Payments Europe, Limited (Ireland) and its affiliates | Payment services under the business’s own Stripe account; also our payment provider for Verimly subscriptions | When a business accepts card or online payments, and when a business pays its subscription |
| Apple Inc. and Google LLC | Apple Wallet and Google Wallet passes for Knownbee loyalty cards | Only when a Knownbee member adds their card to their wallet |
| Google LLC / Google Ireland Limited | Google Maps on business websites | Only when a visitor clicks "Show map" |
| Meta Platforms Ireland Limited | Advertising measurement for Verimly’s own marketing | Only for visitors of verimly.com and people signing up for Verimly who have consented to marketing cookies. Never for guests of businesses |
The following providers receive personal data in connection with the Service but act as independent controllers under their own terms, not as our sub-processors.
4. Changes
AI providers: Anthropic and Voyage AI are added with the launch of the AI assistant and the agent (MCP) interface. We send the 30-day notice described in the Data Processing Agreement before these features are switched on for a customer’s organisation. The features are optional: the assistant can be switched off for an organisation, and so can agent access. See the AI transparency notice.
Planned: push notifications in the Knownbee app will be delivered through Expo (650 Industries, Inc., USA) together with Apple Push Notification service and Firebase Cloud Messaging. These providers will be added to the table above, with the 30-day notice, before push notifications are switched on.