Legal
Subprocessors
Last updated April 2026
Veref engages the third-party subprocessors listed below to deliver the platform. This list is updated continuously and is part of our Data Processing Addendum. Customers can subscribe to change notifications by emailing legal@veref.work.
| Subprocessor | Purpose | Region |
|---|---|---|
| Google Cloud Platform | Primary infrastructure, compute, storage | UK, EU, US |
| MongoDB Atlas | Primary database (candidate and session records) | UK, EU, US |
| Redis Cloud | Real-time session state and queues | UK, EU, US |
| Persona | Identity verification (government ID, liveness) | US |
| Reality Defender | Video deepfake detection API | US |
| Pindrop | Voice authenticity and anti-spoof | US |
| Deepgram | Real-time transcription | US |
| LiveKit | WebRTC video infrastructure | UK, EU, US |
| Postmark | Transactional email | US |
| Cloudflare | CDN, DDoS protection, DNS | Global |
Change notifications
We commit to notifying Customers of any material addition or change to this list at least 30 days in advance. Notifications are sent to the admin email on file and published on this page.
Transfers
International transfers to non-UK, non-EU subprocessors rely on Standard Contractual Clauses and supplementary technical measures (encryption in transit and at rest, pseudonymisation, access controls) as required under UK GDPR and GDPR.
Questions?
Email legal@veref.work and a member of our team will respond within one business day.
Or book a call