Legal | Subprocessors
Subprocessors
Last updated: Semptember 15th, 2026
Table of Contents
GeoComply Solutions Inc. and its affiliates ( “GeoComply,” “we,” or “us”) engages and uses third party vendors (aka “Subprocessors”) to help us provide the Services. A Subprocessor is a third-party company engaged by GeoComply to process Personal Data (i) on behalf of GeoComply’s customers; (ii) in accordance with Customer’s instructions as communicated by GeoComply; and (iii) in strict accordance with the terms of a written contract between GeoComply and the Subprocessor.
GeoComply’s Subprocessors provide infrastructure, data storage, system logging services, and other capabilities for facilitating the delivery of the Services including customer support and email communications. These Subprocessors may be provided access to Personal Information provided by GeoComply’s customers, however they are only permitted to use this information to support the Services.
As part of GeoComply’s commitment to keep its customers’ data secure, we evaluate our Subprocessors’ privacy and security practices prior to engaging them. We also require our Subprocessors to enter into data processing agreements that maintain the confidentiality of personal data and incorporate data protection obligations consistent with applicable privacy laws.
Infrastructure Subprocessors
The following companies provide GeoComply with technical infrastructure cloud services:
| Company Name | Purpose | Location | Security and Privacy Information |
| Amazon Web Services, Inc. | Cloud Services – Infrastructure and Storage | United States | AWS Cloud Security; AWS Data Center Controls |
| Google Cloud Computing | Cloud Services – Infrastructure and Storage | United States | Trust and Security |
| Cloudflare | Web and Security Internet traffic Management | United States | Privacy Policy; Trust Hub |
| Grafana | Performance metrics and event monitoring of infrastructure and cloud services | United States | Privacy Policy; Legal and Security |
| Imply Polaris | Database Management – Storage | United States | Trust Center |
| Sentry.io | Error logging and notifications | United States | Trust Center; Security & Compliance; Privacy Policy |
| Okta | SSO Authentication Services | United States | Privacy Policy; Trust Center |
| Databricks, Inc. | Data Infrastructure, processing, and storage | United States | Privacy Notice |
| Vanta | Security and compliance monitoring | United States | Privacy Policy; Trust Center |
GeoLocation Subprocessors
The following companies provide GeoComply with the capabilities to provide geolocation analysis and visusualization. They collect information surrounding the locations of wireless, access point locations, and cellular networks independently of GeoCompy. For questions regarding the personal data that they possess, please contact the companies listed below directly.
| Company Name | Purpose | Location | Security and Privacy Information |
| Google Cloud Computing | Geolocation Services | United States | Trust and Security |
| Skyhook (a Qualcomm Company) | Geolocation Services | United States | Privacy Policy |
Identity Verification Subprocessors
GeoComply provides our customers access to companies that independently collect personal information for the purposes of identity verification (independent controllers).
For questions regarding the personal data that they possess, please contact the companies listed below directly.
| Company Name | Purpose | Location | Security and Privacy Information |
| AtData | Email Verification | United States | Privacy Policy |
| CAF | Identity and Age Verification | Brazil | Privacy Policy |
| Enformion | Identity Verification | United States | Privacy Policy |
| Equifax Canada | Identity and Age Verification | Canada | Privacy Statement |
| IDology / GBG | Identity and Age Verification | United States / UK | Privacy Policy |
| Incode | Identity Verification | United States | Privacy Policy |
| IDI (Interactive Data) | Identity and Age Verification | United States | Privacy Policy |
| IDVerse (formerly OCR Labs) | Identity Verification | United States, Australia, Europe | Privacy Policy |
| Prove Identity | Phone number and identity verification | United States | Privacy Policy |
| Thomson Reuters (West Publishing Corp) | Identity Verification | United States | Privacy Statement, GDPR Information |
| TMT ID (TMT Analysis) | Phone number verification | United States | Privacy Policy |
| Vital4Data | Identity Verification, Politically Exposed Persons/OFAC check | United States | Privacy Policy |
| OpenSanctions | Sanctions and PEP (Politically Exposed Persons) screening | Germany | Privacy Policy |
Compliance Licensing Management Services
In addition to the infrastructure subprocessors listed above, the following assist GeoComply with delivering its compliance licensing management services.
| Company Name | Purpose | Location | Security and Privacy Information |
| Amazon Web Services, Inc. | Cloud Services – Infrastructure and Storage | United States, Ireland | AWS Cloud Security; AWS Data Center Controls |
| Auth0 | Subscriber security and authentication services | United States | Privacy Policy |
Account Management Services
The following companies assist GeoComply with managing the relationships with our customers.
| Company Name | Purpose | Location | Security and Privacy Information |
| Abnormal Security Corporation | Email protection | United States | Trust Center |
| Google Workspace | Office productivity (email, documents, file storage). | United States | Google Workspace and Security Trust |
| HubSpot | Content management | United States | Trust Center; Security |
| Salesforce | Customer relationship management | United States | Privacy Policy; Trust Center |
| Slack (a Salesforce Company) | Customer communication | United States | Privacy Policy |
| IronClad | Storage and management of business contracts | United States | Privacy Policy |
| SendGrid (Twilio) | Customer communications | United States | Privacy Policy |
| Adobe Inc. | E-signature services | United States | Privacy Policy; Trust Center |
| LogRocket | Session replay platform | United States | Privacy Policy |
| NetSuite (Oracle) | Enterprise resource planning | United States | Privacy Policy |
| Guru (Getguru) | AI services | United States | Privacy Policy |
| Claude (Anthropic) | AI services | United States | Privacy Policy |
| Gemini (Google) | AI services | United States | Google Workspace Security; Google Cloud Trust Center |
| OpenAI (ChatGPT) (for initial trial purposes) | AI services | United States | Trust Portal; Privacy Policy |
| Sharefile | File sharing and storage service | United States | Trust Center |
Affiliates
Customers may be supported by the following GeoComply Affiliates as required to provide the Services
| Legal Entity | Location |
| GeoComply Solutions Inc. | Canada |
| GeoComply USA Inc | United States |
| GeoComply UK Limited | United Kingdom |
| GeoTech Hub Viet-Nam Company Limited | Vietnam |
| GeoComply Poland SP Z O.O. | Poland |
| OneComply Inc. | Canada |
Change History
As of September 15, 2026:
Replaced DataDog with Grafana and Neo4J with Imply Polaris in the Infrastructure Subprocessors; Okta is no longer optional; added Vanta
Added OpenSanctions to the Identity Verification Subprocessors; updated entity names for Equifax Canada, IDology / GBG, IDI (Interactive Data), IDVerse, Prove Identity, Thomson Reuters (West Publishing Corp), TMT ID and Vital4Data
Removed the Anti-Fraud Chargeback Services section (Accertify, Inc.)
Added Abnormal Security, HubSpot, SendGrid (Twilio), Adobe, LogRocket, NetSuite (Oracle), Guru, Claude (Anthropic), Gemini (Google), OpenAI (ChatGPT) and Sharefile to the Account Management Services; removed ZenDesk, Amplitude and Front
As of November 7, 2024:
Added Databricks to the Infrastructure Subprocessors
As of March 11, 2024:
Removed Emailage and LA Wallet from Identity Verification Subprocessors
Added optional Okta to the Infrastructure Subprocessors
Added Vital4 to Identify Verification Subprocessors
Added a Compliance Licensing Subprocessors
Current as of September 15, 2026