Sub-processors

Current sub-processors

Infrastructure & hosting

• Microsoft Azure — Primary cloud hosting, compute, storage, networking, identity (Entra ID). Region: US East. Purpose: platform hosting and customer data storage.
• Microsoft Azure Communication Services — Transactional email delivery and notifications.
• Microsoft Azure Key Vault — Cryptographic key management and secrets storage.
• Microsoft Azure Monitor / Application Insights — Observability, logging, and platform telemetry.

Authentication & identity

• Microsoft Entra External ID — Customer identity, federated SSO, and multi-factor authentication.

Operational tooling

• HubSpot, Inc. — Customer relationship management; lifecycle and pipeline data only.
• Anthropic, PBC — Large language model inference for AI-Assisted authoring (ICA narratives, control evidence summarization). No customer data is used to train models. Zero-retention configurations are in force.
• Stripe, Inc. — Payment processing for subscriptions; receives billing details only, not platform data.

Customer-controlled integrations

The platform integrates with external systems on a per-customer basis (for example, ticketing, IdP, source code, MDM, EDR). These integrations are configured by the customer under their own credentials and are not Verisq sub-processors. See the Master Trust Agreement and Data Processing Addendum for details.

Change notifications

We provide at least thirty (30) days' advance notice of new sub-processors via this page and the customer's primary contact on file. Customers may object to a new sub-processor in accordance with the Data Processing Addendum.

Contact

Questions about this list, requests for additional detail, or sub-processor objections: privacy@verisq.ai.

This page is maintained by Verisq AI, LLC, headquartered in Alpharetta, Georgia, USA.