1. Service providers
Providers receive the data needed for their role.
Google Cloud
Application hosting, database, uploaded files, verification workers and operational logging.
Data: Submitted verification data, saved results, account information and necessary operational metadata.
Processing locations: United States: primary application storage and workers in Iowa; some recovery backups use US multi-region storage. Google’s published subprocessor locations apply to support and service operations.
Clerk
Account authentication and session management.
Data: Account identity, sign-in and device/session information.
Processing locations: United States and the locations in Clerk’s published subprocessor list.
Stripe
Payments, receipts, tax and payment security.
Data: Checkout, billing and payment information. Full card numbers are entered directly into Stripe Checkout.
Processing locations: International processing under Stripe’s service-specific arrangements and published subprocessor list.
DataImpulse
Network transport for selected verification checks.
Data: Connection and routing metadata. Encrypted HTTPS connections carry verification traffic to the destination service.
Processing locations: International network routing under the provider’s processing agreement.
Cloudflare
Domain, delivery and website security services.
Data: Domain and connection information, including request metadata where the service handles traffic.
Processing locations: Global infrastructure; locations depend on the service and request routing.
2. Domain and mail-server checks
Verification also involves DNS resolvers, receiving mail servers and recipient-provider directory or profile services, including Google and Microsoft where relevant. DNS lookups use domain information; recipient and profile checks disclose the selected email address to the destination provider and may return associated profile information. These providers can operate worldwide and process requests under their applicable service arrangements; their role is separate from Google Cloud’s hosting role. Verification does not send an email message.
3. Your connected services
If you use an AI agent or connect another application, that service processes the information you choose to provide under its own terms and privacy arrangements. Those choices are separate from the providers we engage to operate AgentsVerify.
4. International processing
Our main application database and saved verification history are hosted in the United States. Other processing follows the locations and arrangements above. Our Data Processing Agreement sets out the applicable processing and international-transfer obligations.
See our Privacy information for data controls and retention.