Legal
Subprocessors
Service providers that process personal data on WorkPair’s behalf.
Version 2026-10-05 · Last updated October 5, 2026 · WorkPair®, Inc.
Draft pending legal review. This document describes how WorkPair works today. It has not yet been reviewed by counsel and may change before it is final.
| Provider | What for | Data | Location |
|---|---|---|---|
| Stripe, Inc. | Identity verification (document, selfie, liveness, ID number); card payments, saved cards and business verification | Identity-check data; payment and business details | United States |
| Resend | Sending email (sign-in codes, notices, invitations) | Email addresses and message contents | United States |
| Vercel Inc. | Hosting the website and API; request logs | All data in transit; IP addresses in logs | United States |
| Neon (Databricks, Inc.) | Database hosting | All stored data (personal fields encrypted) | United States |
| OpenCorporates | Looking up organizations that apply to issue credentials | Organization names and registry numbers | United Kingdom |
| Public sanctions lists: US Treasury (OFAC), UN Security Council, European Union, UK Government (FCDO) | Sanctions screening of organizations and the people who act for them (we download the public lists; nothing is sent) | None | United States, international, European Union, United Kingdom |
| Domain registries (RDAP and WHOIS, located through IANA) | Confirming when an applying organization’s domain was registered | The organization’s domain name only (no personal data) | Varies by domain |
[Counsel to confirm: data processing agreements in place with each provider; transfer mechanisms; how customers are notified of changes]