Legal
Subprocessors
Last updated: May 2026
The following third parties process personal data on Verixa's behalf to deliver the service. Each is contractually bound by a Data Processing Agreement and engaged only to the extent necessary for the stated purpose.
We will update this list when subprocessors are added or removed. Material changes are communicated to administrators via in-app notice at least 30 days in advance where required by GDPR Art. 28.
| Subprocessor | Purpose | Region |
|---|---|---|
| Supabase (via Lovable Cloud) | Managed Postgres, authentication, object storage, realtime | United States / EU |
| Cloudflare | Edge hosting, CDN, DDoS protection, Worker runtime for server functions | Global edge |
| Stripe | Subscription billing, marketplace payouts (Stripe Connect), identity verification | United States / EU |
| Lovable AI Gateway | Routing AI inference requests to Google and OpenAI models | United States / EU |
| Google (Gemini, Maps) | AI inference for drafting and search; maps for practitioner directory | United States / EU |
| OpenAI | AI inference for select drafting and analysis features | United States |
| SearchAPI | Aggregated public patent and grant record search | United States |
| Resend (transactional email) | Account, billing, collaboration, and notification email | United States / EU |
International transfers
Where personal data leaves the EEA, transfers rely on the EU Standard Contractual Clauses (2021/914) or equivalent safeguards. Verixa monitors adequacy decisions and updates contracts accordingly.
Questions
Email privacy@verixaai.com to request our current Data Processing Agreement or to ask about a specific subprocessor.