Sub-processors
Effective Date: March 10, 2026 · Last Updated: March 12, 2026
VeroFin uses the following third-party service providers ("sub-processors") to deliver the Platform. These providers only process data on our instructions and solely for the purposes described below. We require each sub-processor to maintain appropriate technical and organizational security measures.
| Provider | Purpose | Categories of Data | Primary Region |
|---|---|---|---|
| Supabase | Database, authentication, and file storage | Account data, filings, extracted fields, uploaded documents (private buckets), audit-related metadata | United States |
| Vercel | Application hosting and edge delivery | Application code, cookies and session identifiers, limited request metadata | United States |
| OpenRouter / LLM Providers | AI-powered extraction and validation of closing documents | Document text and images necessary to extract FinCEN-required fields for a given filing. Configured with no-training and limited-retention settings; data is not used to train models. | United States (model-dependent) |
| Stripe | Billing and subscription management | Billing contact information, payment method details (card data stored only by Stripe), invoices and subscription events | United States |
| Resend | Transactional and authentication email | Recipient email address, email content (notifications, confirmations, onboarding messages) | United States |
We may update this list from time to time as our infrastructure evolves. Material changes to our sub-processor relationships will be reflected on this page and, where required, communicated via email or in-app notice. For further details on how we use sub-processors, please refer to our Privacy Policy.