Subprocessors
Last updated: July 17, 2026
This list applies to direct-buyer workflows on buy.attestlayer.com only.
| Provider | Purpose | Processing location |
|---|---|---|
| Google Cloud Platform, Google LLC | Hosting, compute, database, storage, encryption-at-rest infrastructure, networking, security logging, and customer source-record processing. Buyer request and source-file bytes are processed, and generated private package objects are stored, in the Montréal region for the direct-buyer Buyer Review Pack. | Canada; limited service metadata may be processed where Google provides the relevant support and infrastructure services. |
| Stripe, Inc. | Card payments, invoices, receipts, tax and payment records, payment status, refunds, and billing-related fraud prevention. | United States and other Stripe-supported regions. |
| SendGrid / Twilio SendGrid | Transactional email for invoices, payment confirmations, order access, and support or billing communications where transactional email is active. | United States and other SendGrid-supported regions. |
| PostHog, Inc. | Limited website and product analytics for buy.attestlayer.com. Uploaded buyer requests, source records, generated response statements, evidence binder index files, manifests, receipts, and package files are excluded from PostHog. | United States and other PostHog-supported regions. |
| Cloudflare, Inc. (Turnstile) | Abuse prevention and CAPTCHA verification on protected public forms where Turnstile is enabled. Cloudflare receives the verification token and limited request/device/network information needed to assess abuse; buyer requests, source records, and generated packages are not sent to Turnstile. | United States and other locations in Cloudflare's global service network. |
The table above identifies the current subprocessors used for the direct-buyer workflow. A material change to this list is posted on this page before a new processor receives direct-buyer source records, except where immediate action is necessary to protect the Service or comply with law.
Before personal information is communicated outside Québec, AttestLayer requires an approved privacy impact and cross-border assessment concluding that adequate protection is available, together with a written agreement for the transfer. The protected production release gate binds private assessment and agreement hashes for every provider listed above; those confidential documents are not published on this page.
Questions about subprocessors: privacy@attestlayer.com