Trust Center
Subprocessors
Third parties that process customer data on behalf of SectID customers. All subprocessors are subject to Data Processing Agreements (DPAs) with appropriate safeguards.
| Vendor | Purpose | Region | Category |
|---|---|---|---|
| Smile Identity | Document & biometric verification | Global | Identity |
| Amazon Web Services | Cloud infrastructure | eu-west-1 / af-south-1 | Identity |
| Neon Postgres | Managed database | EU | Database |
| Vercel | Application hosting | Global edge | Infrastructure |
Due Diligence
Before engaging any subprocessor, SectID conducts a thorough security and privacy assessment including:
- Security questionnaire and evidence review
- SOC 2 Type II or ISO 27001 certification verification
- Data Processing Agreement (DPA) execution
- Annual re-assessment and continuous monitoring
- Subprocessor notification to customers 30 days in advance
For questions about subprocessors, contact privacy@sectid.com