These are the third parties that process customer data on our behalf, what each one does and where. Each is bound by a data processing agreement.
| Subprocessor | What it does for us | Data it processes | Where |
|---|---|---|---|
| Cloudflare, Inc. | Hosting of the website, API and dashboard; storage of accounts, uploaded lists and results; sending and receiving email; bot checks; the AI support assistant | All service data, including account details, addresses you check, uploaded files and support messages | Global network; storage in the United States |
| Stripe, Inc. | Payments, invoices and payment fraud prevention | Billing name and address, VAT ID, payment details (handled by Stripe), purchase records | United States |
| Google LLC | Sign-in with Google, only if you choose it | Your Google account email address and account identifier | United States |
| Email verification infrastructure provider | Performs the mailbox checks behind each validation | The email addresses you submit for checking, and an IP address only if you send one with an API request | United States |
The email verification provider
Mailbox checks run on specialist email verification infrastructure operated by a contracted provider in the United States. The public list names it by category. Customers can see its full name and address in the data processing agreement annex in their dashboard (sign in to view it), as GDPR requires.
Changes
We announce any new or replaced subprocessor at least 30 days before the change, by email to every active account and on the changelog. Questions go to privacy@email-validation.org.