Google Cloud
Hosting for the application, API and PostgreSQL database (Compute Engine and Cloud SQL)
Workspace, staff, verification and audit records
Sydney, Australia (australia-southeast1)
Legal centre
Subprocessors
These are the third parties that handle customer personal information while we run Vericode. The primary customer and verification records are hosted in Australia. Some providers operate overseas, and this page shows which.
Last updated: 22 October 2026
Customer data
MobileMessage
SMS delivery of verification codes
Recipient mobile number, message text and delivery status
Australia
WorkOS
Staff sign-in and organisation membership
Staff names, work email addresses and sign-in events
United States
Stripe
Subscription billing and payments
Billing contact, business details and payment card (card details are held by Stripe, not Vericode)
United States and other Stripe locations
Loops
Account and lifecycle email
Account holder name, email address and account events such as sign-up and trial status
United States
Microsoft 365
Business email for support, privacy and security requests
Whatever you choose to send us by email
Microsoft cloud
Website only
These providers run the public website. They do not receive workspace or verification data.
Cloudflare
DNS for Vericode domains, and hosting and delivery of this website
Global edge network
Plausible Analytics
Cookieless, aggregate statistics about visits to this website
European Union
What is not on this list
- Mobile carriers deliver each SMS to the recipient's phone. They are part of the telephone network, not providers we engage.
- Integrations you switch on yourself, such as a practice management system, are your own systems connected on your instruction.
- Vericode can also route SMS through ClickSend or Twilio, and the code can report errors to Sentry. None of these is switched on in production today. We will add a provider here before it handles customer data.
Changes and questions
When this list changes we update this page and the date above. For questions about a provider, or how we handle data sent overseas, email [email protected].