Loading...
Loading...
This site uses cookies for authentication and language preferences. No tracking or advertising cookies are used. You can choose to reject all cookies — the site will still work, but language preferences won't persist across visits. Learn more
EU data residency, security controls, and the live sub-processor register
This page is the canonical, public source of truth for Turing Verify's data residency, sub-processor register, and security posture. It complements our Privacy Policy and is referenced by our customer DPAs. We update it as our infrastructure evolves and announce material changes at least 30 days before they take effect.
Primary storage — European Union
All primary application infrastructure (frontend, API, PostgreSQL database, object storage) is pinned to europe-west4 — Amsterdam, Netherlands on Railway. Your account data, verification records, and uploaded document cache never leave the European Union for storage.
Cross-border transfers for AI inference
To produce a verification verdict, document content is transmitted to AI model providers (Anthropic, OpenAI) whose inference infrastructure is currently located in the United States. Content is processed transiently — it is not retained for training or any other purpose beyond the immediate API request — and the transfer is governed by Standard Contractual Clauses and the EU-U.S. Data Privacy Framework. Our backend ships with a configurable EU inference router (INFERENCE_REGION=eu) that pins Anthropic calls to an EU-resident gateway (AWS Bedrock eu-central-1 / Vertex europe-west) and OpenAI calls to Azure OpenAI EU (France Central / Sweden Central) or Mistral La Plateforme — eliminating the cross-border transfer entirely. Production cut-over for EU customer traffic is in progress.
All other US-resident sub-processors (payments, email, OAuth) are covered by the same SCC + EU-U.S. DPF safeguards. The full register is below.
Each sub-processor below is bound by a Data Processing Agreement and processes data only on our instructions. New or replaced sub-processors are announced on this page at least 30 days before they go live; customers may object in writing during that window.
| Processor | Purpose | Data | Location | Safeguard |
|---|---|---|---|---|
| Railway | Application hosting, database, object storage | Account data, verification records, document cache | EU — Amsterdam (europe-west4) | Intra-EU; DPA |
| Anthropic | AI document analysis (paid tier) | Document content (transient) | United States | SCCs + EU-U.S. DPF; zero-retention API |
| OpenAI | AI document analysis (free tier) | Document content (transient) | United States | SCCs + EU-U.S. DPF; zero-retention API |
| Stripe | Payment processing and billing | Billing identifiers, subscription metadata | United States / EU | SCCs + EU-U.S. DPF; PCI-DSS Level 1 |
| Resend | Transactional email delivery | Email address, message content | United States | SCCs + EU-U.S. DPF |
| OAuth authentication (sign-in) | Name, email, profile picture | United States | SCCs + EU-U.S. DPF | |
| LinkedIn (Microsoft) | OAuth authentication (sign-in) | Name, email, profile picture | United States | SCCs + EU-U.S. DPF |
| Cloudflare | CDN, DDoS protection, TLS termination | IP address, request metadata | Global edge (EU points of presence preferred) | SCCs; data minimization |
We implement technical and organizational measures aligned with ISO/IEC 27001 controls:
Uploaded document images are cached in the EU for up to 72 hours after verification, then permanently deleted. Verification metadata (verdict, scores, annotations) is retained until you request deletion. Full retention schedule: Privacy Policy §5.
Business and Pro customers may execute our standard DPA, which incorporates the EU Standard Contractual Clauses by reference. Request a copy from [email protected].
To be notified of additions or replacements to the sub-processor register at least 30 days in advance, email [email protected]with the subject "Subscribe: sub-processor updates".