Sub-processors

Verificient Technologies, Inc. · Last updated: 18 September 2026

About this page. Under Section B.5 of the Meritclaw Customer Agreement (Data Processing Addendum), Verificient maintains a list of sub-processors that process Customer Data on its behalf. This page is that list. If you do not accept a new sub-processor, your remedy is to cancel under Section 11.2 of the Agreement.

Infrastructure & Hosting

Sub-processor	Purpose	Data processed	Location
Google Cloud Platform (Google LLC)	Cloud hosting, compute, database (Cloud SQL), object storage (Cloud Storage), and application infrastructure	All Customer Data including Session Media, face captures, Candidate Data, account data and configuration	United States (us-central1)

Payment Processing

Sub-processor	Purpose	Data processed	Location
Stripe, Inc.	Subscription billing, payment card processing, invoicing and Checkout Sessions	Organization billing details, payment card information (handled entirely by Stripe — card numbers never touch Meritclaw servers), email addresses for receipts	United States

AI & Machine Learning

Sub-processor	Purpose	Data processed	Location
OpenAI, L.L.C.	Assessment generation, résumé probing, candidate scoring, integrity analysis, AI-assisted grading and HR chat	Job descriptions, assessment content, candidate responses, résumé text, scores and transcripts. No face captures, Session Media or biometric data is sent to OpenAI. Data is not used by OpenAI for training (API usage policy).	United States

Email & Communications

Sub-processor	Purpose	Data processed	Location
Twilio SendGrid (Twilio Inc.)	Transactional email delivery — account notifications, session invitations, billing alerts, password resets and assessment invites	Recipient email addresses, email subject lines, email body content (names, session details, organization names)	United States

Customer-Configured Integrations

The following services are engaged only when the Customer explicitly enables the integration in their dashboard. They do not process any data unless activated by the Customer.

Sub-processor	Purpose	Data processed	Location
Google (Google Calendar API)	Calendar integration — creates and manages interview calendar events when connected by the Customer	Interview schedules, participant email addresses, meeting links. Only synced when the Customer has connected their Google account.	United States

What we do not use

No third-party face-matching service. Identity verification runs entirely on our own infrastructure. Face captures and biometric data never leave our GCP environment.
No data sold or shared for advertising. We do not sell, share for cross-context advertising, or otherwise profit from Customer Data or Candidate Data.
No training on Customer Data. Neither we nor our AI sub-processors use Customer Data to train, fine-tune or improve any model.

Changes to this list

This page is updated when sub-processors change. If you have questions about our sub-processors, contact us at legal@verificient.com.

Contact

Verificient Technologies, Inc., 300 Witherspoon Street, Suite 201, Princeton, New Jersey 08542 · legal@verificient.com · support@verificient.com