Subprocessors
Last updated: July 12, 2026
Veridexa engages a limited set of third-party providers ("subprocessors") to help deliver, secure, and support our document verification services. Each subprocessor is engaged under the applicable provider agreement, consistent with our Privacy Policy and DPA.
Active subprocessors
These providers may process data during normal operation of the Services.
| Provider | Purpose | Data categories |
|---|---|---|
| Cloudflare, Inc. | Edge hosting, content delivery, network security, and operational request logging. | IP address and request metadata, data transmitted through the service, operational logs. |
| Supabase (Lovable Cloud) | Authentication, database, private document storage, and verification result storage. | Account information, uploaded documents, extracted document information, verification results. |
| Lovable AI Gateway (Google Gemini) | OCR, document analysis, and AI reasoning used by the active verification pipeline. | Uploaded document content, extracted text, document-derived signals and prompts needed for analysis. |
| Hostinger | SMTP delivery for contact and sales messages. | Name, email address, contact-message content. |
Conditional subprocessors
These providers are not used in every verification. They only receive data when the associated optional path is enabled by configuration and actually invoked.
OpenAI
- Condition:
- Used only when an OpenAI-enabled workflow or ChatGPT file flow is invoked and the required configuration is active.
- Purpose:
- Retrieving ChatGPT-uploaded files and optional AI analysis paths where configured.
- Data categories:
- Uploaded file content, file references, analysis prompts and derived document information.
Google Cloud Vision
- Condition:
- Used only when the Google Cloud Vision provider is enabled through production configuration.
- Purpose:
- Optional OCR or document-image analysis.
- Data categories:
- Document images or document bytes required for analysis.
Configured remote PDF rasterization provider
- Condition:
- Used only when VERIDEXA_REMOTE_RASTERIZER_URL is configured and the remote rasterization path is invoked.
- Purpose:
- Conversion of PDF pages into images for document analysis.
- Data categories:
- PDF document bytes.
Provider-specific locations, retention terms, and contractual safeguards are governed by the applicable provider agreement and may vary by configuration.
- The set of subprocessors that actually process data may vary depending on the features used and on account or environment configuration.
- Conditional subprocessors do not receive data unless the associated path is both enabled and invoked.
- Veridexa will update this page when a subprocessor is added or replaced in a way that materially affects data processing.
To be notified of material changes to our subprocessor list, email privacy@veridexa.io.