Legal
Subprocessors
Updated July 2026
The third-party services Vraelis relies on to run the product. Verification runs against your connected application use our hosting and browser-execution infrastructure, and any AI assessment is sent to the AI model provider.
| Subprocessor | Purpose | Data | Region |
|---|---|---|---|
| Anthropic | AI model that plans each verification's requirements and flows | The deployment and claim you submit for a verification | United States |
| Browserbase | Browser-execution infrastructure for verification runs | Deployment URL, approved flows, and run-supplied test credentials | United States |
| Supabase | Database, storage, and authentication | Account, verifications, balance, content | United States |
| Vercel | Application hosting and delivery | Request and app traffic | United States / global edge |
| Cloudflare | DNS, CDN, and DDoS protection | Request metadata | Global edge |
| Stripe | Payments and subscription billing | Billing details, payment status | United States |
| Resend | Transactional email (verification, receipts) | Email address, message content | United States |
| Google / GitHub | Optional single sign-on | Email and basic profile, only if you use it | United States |
Data location and transfers
Several subprocessors process data in the United States. Where personal data is transferred internationally, the transfer relies on the subprocessors' own standard contractual clauses and safeguards. Each subprocessor is engaged under its own data-processing terms.
Changes
We may add or replace a subprocessor as the product evolves. When we make a material change we will update this page. If you need advance notice of new subprocessors for a contract, contact us and we can arrange it.
Contact
Questions about a subprocessor or a data-processing agreement? Email [email protected]. See also our Privacy Policy.