Subprocessors
The third parties Verenna engages to process Customer Data, including sensitive data under applicable data-protection law. Last updated . Reviewed monthly. We commit to 30 days advance notice before adding any new subprocessor that processes sensitive data.
Active subprocessors
Amazon Web Services
Cloud infrastructure: compute, primary database, object storage, in-memory cache, secrets storage, key management, log aggregation, transactional email, hosted LLM inference, voice-note speech-to-text transcription, and address lookup.
- Location
- United States (us-east-1)
- DPA status
- Standard terms, incorporated at signup
- Services
- ECS Fargate, Aurora PostgreSQL, Amazon S3, ElastiCache Redis, AWS KMS, AWS Secrets Manager, Amazon CloudWatch, Amazon SES, Amazon Bedrock (Anthropic Claude models), Amazon Transcribe (voice-note speech-to-text), Amazon Location Service (address lookup for the person address field)
- Compliance
- SOC 2 Type II, ISO 27001, ISO 27017, ISO 27018, DPA-eligible, FedRAMP High, PCI DSS Level 1
- Last reviewed
- Reference
- https://aws.amazon.com/compliance/
Twilio
Outbound SMS for candidate communications, client and contact appointment reminders, and optional MFA fallback codes.
- Location
- United States
- DPA status
- Standard terms, incorporated at signup
- Services
- Programmable Messaging (SMS)
- Compliance
- SOC 2 Type II, HITRUST CSF, DPA, ISO 27001
- Last reviewed
- Reference
- https://www.twilio.com/en-us/legal
Telnyx
Outbound SMS, as an alternative transport to Twilio. NOT YET ACTIVE — wired and selectable, but enabled on no stage, so Telnyx processes no data today. Listed ahead of activation so advance notice precedes traffic.
- Location
- United States
- DPA status
- Not yet reviewed by us
- Services
- Programmable Messaging (SMS)
- Compliance
- [UNVERIFIED] — SOC 2 / ISO 27001 claimed by the vendor, unconfirmed against our terms
- Last reviewed
- Reference
- https://telnyx.com/legal
Atlassian (Statuspage)
The outside status page for outage notices: incidents, updates and the subscriber alerts it sends while our own systems may be down. NOT YET ACTIVE — wired, but enabled on no stage, and no subscriber is synced until the DPA is signed. Listed ahead of activation so advance notice precedes any data.
- Location
- United States
- DPA status
- Not yet reviewed by us
- Services
- Statuspage (status page, incidents, subscribers)
- Compliance
- [UNVERIFIED] — vendor security claims unconfirmed against our terms
- Last reviewed
- Reference
- https://www.atlassian.com/legal/data-processing-addendum
Stripe
Subscription billing for the platform (the billing contact's name, work email and invoices, on Verenna's own account) and the payment rails for donations, which settle to the customer's own connected Stripe account.
- Location
- United States
- DPA status
- Not yet reviewed by us
- Services
- Billing (Customers, Subscriptions, Invoices), Connect (donor payments)
- Compliance
- [UNVERIFIED] — PCI DSS Level 1 / SOC 2 / ISO 27001 claimed by the vendor, unconfirmed against our terms
- Last reviewed
- Reference
- https://stripe.com/legal/dpa
Better Auth (self-hosted)
Authentication, session management, and built-in TOTP-based 2FA. Self-hosted: sessions persist in Verenna's own Aurora Postgres; no third-party service receives data.
- Location
- United States (us-east-1, hosted within Verenna's AWS account)
- DPA status
- Not applicable
- Services
- Authentication library (self-hosted), TOTP 2FA
- Compliance
- Open-source library; audited via SBOM and dependency review
- Last reviewed
- Reference
- https://www.better-auth.com/docs
Not subprocessors
Listed for transparency. These vendors appear in our supply chain but never process Customer Data.
GitHub
Source-code hosting only. No Customer Data, no sensitive data, and no production credentials are pushed to GitHub. Enforced by gitleaks pre-commit and the sensitive-data CI check.
Sentry
Error monitoring; disabled by default in v0. If enabled, will be added as a subprocessor with 30-day customer notice and written data-processing agreement before any integration ships.
Authorize.Net
An alternative donation gateway an organisation may connect using its own merchant credentials. Funds settle to that organisation's own merchant account and Verenna takes no fee, so the relationship is theirs rather than ours; no cardholder number reaches Verenna's servers. Off by default.
Intuit QuickBooks Online
An accounting ledger an organisation may connect using its own QuickBooks company, so its recorded gifts and refunds are posted into its own books. The relationship is the organisation's own; only amounts, dates, the chosen account and class, and a gift reference are sent — never a donor's name, contact details or payment details. Off by default.