When you use eIDAS Pro, we act as a data processor on your behalf. The third parties below may process data as part of delivering the service. We publish this list in full, without gating, in the interest of transparency.
| Sub-processor | Role | Data processed | Location |
|---|---|---|---|
| IDURA | eID broker (iDIN) | Verification request and result (boolean 18+; no date of birth retained by us) | EU |
| Stripe | Billing and payments | Merchant billing and subscription data | EU / US (SCCs) |
| Resend | Transactional and marketing email | Email address and message content | EU / US (SCCs) |
| Supabase | Database and hosting (PostgreSQL) | Merchant and verification metadata | EU |
| Netlify / Railway | Application hosting | Request and runtime data | EU / US (SCCs) |
| Sentry | Error and performance monitoring | Diagnostic and technical data | EU / US (SCCs) |
This list may change as the service evolves; material changes will be announced with reasonable notice.
Download the DPA sample
Get a sample Data Processing Agreement for your legal team to review.
Sample template — not legal advice, subject to change. The binding DPA is the version executed between the parties.