Last updated: 2 July 2026
TrustVerifyID may use selected subprocessors to operate the verification service. This page lists categories of subprocessors and any provider whose name is already publicly disclosed in our infrastructure or documentation. We update this list as our subprocessor relationships change. Material changes are announced to active customers in advance.
We engage subprocessors for the following purposes:
| Provider | Purpose | Data category | Region | Status |
|---|---|---|---|---|
| Tesseract OCR (self-hosted) | OCR – text extraction from identity documents | Identity document images | EU | In use |
| Google Cloud Vision | OCR – fallback when local OCR is insufficient | Identity document images | Configurable | Optional / fallback |
| Mindee Document AI | OCR – structured extraction (optional) | Identity document images | Configurable | Optional |
| Google Document AI | OCR – structured extraction (optional) | Identity document images | Configurable | Optional |
| AWS Rekognition | Biometric face match (optional) | Selfie images | Configurable | Optional |
| Azure Face | Biometric face match (optional) | Selfie images | Configurable | Optional |
| Stripe | Billing & payment processing | Billing data | Global | In use |
| SMTP provider (e.g. SendGrid) | Transactional email delivery — required for password reset and verification mail | Email addresses | Configurable | Optional — not configured |
| Sentry | Application error monitoring | Diagnostic data | EU / configurable | Optional |
| Twilio Programmable Video | Live agent video KYC sessions (optional) | Video / metadata | Configurable | Optional |
| Daily.co | Live agent video KYC sessions (optional) | Video / metadata | Configurable | Optional |
| Wasabi / S3-compatible storage | Encrypted file storage (optional) | Encrypted documents | Configurable | Optional |
| Dow Jones Risk & Compliance | Sanctions / PEP screening (optional) | Name & DOB only | Global | Optional |
| Refinitiv World-Check | Sanctions / PEP screening (optional) | Name & DOB only | Global | Optional |
"Optional" means the subprocessor is available behind a configuration flag and is not enabled by default. Customers can request our current configuration and the active list of subprocessors as part of their data processing agreement.
Where personal data is transferred outside the EEA, we rely on EU Standard Contractual Clauses (SCCs) and any additional safeguards required by applicable law.
Customers on contracted plans may subscribe to subprocessor change notifications. To request the current list, raise an objection, or ask for a copy of our DPA, write to privacy@trustverifyid.com.