Sub-processors
What this page is
To run VeriKeep we use a small number of other companies — for hosting, for storing your files, for sending email and for recording errors. Data protection law calls them sub-processors, and it requires us to tell you who they are.
This page is that list. It is complete: there is nobody handling your data who is not named here.
Who we use
| Company | What it does | Where |
|---|---|---|
| Supabase | Stores your account, your evidence records and the files you upload. Handles signing in. | United Kingdom (AWS London) |
| Vercel | Runs the VeriKeep application itself — the pages you see and the requests behind them. | United Kingdom (London) |
| Resend | Sends the email VeriKeep generates: invitations to colleagues, and reminders that a document is about to expire. | European Economic Area (Ireland) |
| Sentry | Records technical errors so we can find and fix faults. It receives diagnostic information, not your documents. | European Economic Area (Germany) |
| Cloudflare | Provides the domain name service that points verikeep.co.uk at our servers. It does not receive your documents. | Not applicable — no customer data passes through it |
Where your documents are
The documents you upload are stored in the United Kingdom, in AWS London, and the application that reads them runs in London too.
Two of the services above are in the European Economic Area rather than the UK: Resend, which sends our email, and Sentry, which records errors. Neither receives the documents you upload. We do not transfer your data outside the UK or EEA for any other purpose.
Changes to this list
We will email you at least 30 days before we add or replace a sub-processor, so that you have time to consider it before it takes effect.
We will not add one quietly. If this page changes, the notice comes first.
Last reviewed
This page was last reviewed in September 2026.