Skip to content

Legal

Subprocessors

Last updated 8 September 2026

To provide Verifycate, we rely on carefully selected third-party subprocessors. Each one processes data only on our instructions and under appropriate contractual safeguards. We keep this list current and update it whenever we add or remove a subprocessor.

SubprocessorServicePurpose
DigitalOceanCloud hostingWeb hosting provider. Runs the Verifycate application, API, and supporting infrastructure.
CloudflareWAF, email delivery, and media storeWeb application firewall and CDN protection, transactional email delivery (certificate and account emails), media and asset storage, and certificate rendering.
Google LLCWeb analytics and authenticationAnonymous usage analytics via Google Tag Manager and Sign In with Google for account authentication.
RazorpayPayment processing serviceProcesses subscription and one-time payments. Payment card details are handled directly by Razorpay and never touch Verifycate servers.
OpenRouterAI model providerProvides the AI models behind AI-generated certificate templates. Prompts are processed to generate template designs and are not used for training.

Changes to this list

When we add or replace a subprocessor in a way that affects how your data is processed, we will update this page before the change takes effect. Questions about our subprocessors can be sent to [email protected].