On this page
Veris Privacy Inc. uses the third parties below to help provide PrivacyTenet. A subprocessor is a third party that processes personal data in Customer Data on our behalf, as described in section 5 of our Data Processing Agreement. Each subprocessor is bound by a written contract that protects personal data at least as well as our DPA, and we remain responsible for their performance.
1Current subprocessors
| Subprocessor | Purpose | Personal data processed | Location |
|---|---|---|---|
| DigitalOcean, LLC | Cloud hosting, database, backups | All Customer Data | Canada (Toronto) |
| Resend | Transactional email (invites, notifications, password resets) | User names and email addresses; email content | United States |
2Other service providers
The provider below is not a subprocessor. It does not process Customer Data. It processes billing information that Veris Privacy controls, as described in our Privacy Policy.
| Provider | Purpose | Personal data processed | Location |
|---|---|---|---|
| Stripe | Payments and invoicing | Billing contact name, email, company, address and payment status. Stripe holds card details; we never see or store full card numbers. | United States |
3Where Customer Data is stored
All Customer Data, including audits, inventory records, checklists, remediation actions and comments, is hosted in Canada on DigitalOcean servers in Toronto.
Resend processes only the limited data needed to send service emails: User names, email addresses and the content of those emails. Transfers to the United States are protected as set out in section 8 of our Data Processing Agreement.
4Changes to this list
We give at least 30 days’ notice before adding or replacing a subprocessor, by updating this page and notifying our subscribed customers. In an emergency, such as replacing a provider to keep the Service secure or running, notice may be shorter.
Customers may object to a new subprocessor on reasonable data protection grounds within the notice period, as set out in section 5.4 of our Data Processing Agreement.
5Change history
| Date | Change |
|---|---|
| Nov 2, 2026 | List published: DigitalOcean, Resend |
6Contact
Veris Privacy Inc.
1025 King Street East, Unit 107 #1563
Cambridge, ON, N3H 3P5
Email: privacy@verisprivacy.com