Last updated: October 6, 2026.
We use the companies below to deliver VeriCord. Each processes personal information or Customer Content only for the purpose described. See the privacy notice for how that information is used and how long it is kept.
Customers authorize these subprocessors to support the Services. Each is required to protect personal information in a manner consistent with VeriCord's obligations. Where a contract requires it, we give advance notice of a new material subprocessor.
Infrastructure and product
Supabase hosts the database, authentication, and file storage. It processes account records, workspace membership, review files, findings, and reviewer decisions so the Service can store them and enforce access control.
Stripe processes subscription payments. It receives billing details and payment-card data. VeriCord receives the subscription status and a payment reference, not the full card number.
Model providers
OpenAI runs the primary comparison of drawings and specifications, and answers questions you ask about a review. It receives the document text and job context needed for that request.
Anthropic runs the independent check of high-value findings. It receives the evidence for those findings and does not receive the first model's conclusion.
Model providers process that content to return a result for the request. We do not permit them to use Customer Content to train their public models.
Other providers
Transactional email, such as sign-in links and workspace invitations, is sent by the email delivery provider configured for the Service. Error monitoring, when enabled, receives diagnostic events so we can fix failures. Those providers do not receive your uploaded drawings for product features.
Changes
We will update this page before a new subprocessor starts processing Customer Content. The date at the top of the page changes when the list changes. Where a signed agreement requires notice, enterprise customers can raise a documented data-protection objection within a reasonable time after that notice.
To ask about a subprocessor, use the contact page.