Legal
Subprocessors
Last updated 21 October 2026
To provide Verifycate, we rely on carefully selected third-party subprocessors. Each one processes data only on our instructions and under appropriate contractual safeguards. We keep this list current and update it whenever we add or remove a subprocessor.
If a workspace connects its own email provider or SMTP server, that provider is selected and controlled by the customer. It is not a Verifycate subprocessor, and its own terms and data processing apply.
| Subprocessor | Service | Purpose |
|---|---|---|
| DigitalOcean | Cloud hosting | Web hosting provider. Runs the Verifycate application, API, and supporting infrastructure. |
| Cloudflare | WAF, email delivery, and media store | Web application firewall and CDN protection, transactional email delivery through Cloudflare Email Sending, media and asset storage, and certificate rendering. |
| Amazon Web Services (AWS) | Email delivery (Amazon SES) | Transactional email delivery through Amazon SES, including custom sending domains and delivery events. Used when a workspace sends through the platform's SES transport. |
| Google LLC | Web analytics and authentication | Anonymous usage analytics via Google Tag Manager and Sign In with Google for account authentication. |
| Razorpay | Payment processing service | Processes subscription and one-time payments. Payment card details are handled directly by Razorpay and never touch Verifycate servers. |
| OpenRouter | AI model provider | Provides the AI models behind AI-generated certificate templates. Prompts are processed to generate template designs and are not used for training. |
| Alchemy | Blockchain RPC provider | Reads from and writes to the Base network for Blockchain Verifiable Certificates — committing certificate fingerprints and minting name-masked NFT records. |
| OpenTimestamps | Bitcoin timestamping | Submits certificate batch fingerprints to public calendar servers so they can be timestamped in a Bitcoin block and verified offline. |
| Arweave (ar.io / Turbo) | Permanent content storage | Stores the encrypted credential, the name-masked presentation image, and NFT metadata for Blockchain Verifiable Certificates on the Arweave network (pay-once). |
Changes to this list
When we add or replace a subprocessor in a way that affects how your data is processed, we will update this page before the change takes effect. Questions about our subprocessors can be sent to [email protected].