Sub-Processor List
Last updated: 30 April 2026
Operated by: Tamir Spiegel Ltd (trading as ai.verest)
ai.verest uses the following third-party sub-processors to deliver the Service. All sub-processors are bound by data processing agreements and appropriate transfer safeguards.
Customers will be notified of changes to this list at least 30 days in advance, in accordance with our Data Processing Agreement.
| Sub-processor | Purpose | Location | Transfer Mechanism |
|---|---|---|---|
| Supabase (Supabase Inc.) | Database, real-time data, file storage | UK (London) | No transfer — UK region |
| Stripe (Stripe Payments UK Ltd / Stripe Inc.) | Payment processing and subscription management | UK / US | UK entity: no transfer; US entity: UK IDTA |
| Kinde (Kinde Pty Ltd) | Authentication and user identity management | US / AU | UK IDTA |
| OpenAI (OpenAI Inc.) | AI content generation (Sales Agent, Marketing Agent) | US | UK IDTA |
| Hostinger (Hostinger International Ltd) | Application hosting and infrastructure | EU / US | UK IDTA (US) / UK adequacy (EU) |
| Cookiebot (Cybot A/S) | Cookie consent management | EU (Denmark) | UK adequacy (EEA) |
| Simple Analytics (Simple Analytics B.V.) | Privacy-friendly website analytics — no cookies, no IP storage | EU (Netherlands) | UK adequacy (EEA) |
| Apollo.io (Apollo.io Inc.) | Lead intelligence and contact enrichment via OAuth integration | US | UK IDTA |
| Microsoft OneDrive (Microsoft Corporation) | Cloud file storage and document integration | US / EU | UK IDTA (US) / UK adequacy (EU) |
Transfer Mechanisms
No transfer (UK region): Supabase data is stored in AWS eu-west-2 (London, UK).
UK adequacy (EEA): The UK has recognised EEA countries as providing adequate data protection. Applies to Cookiebot and Simple Analytics.
UK International Data Transfer Agreement (IDTA): The ICO-approved mechanism for transfers to the US. Applies to OpenAI, Kinde, Stripe Inc., Hostinger (US services), Apollo.io, and Microsoft OneDrive (US services).
Changes
We notify customers of additions or replacements to this list at least 30 days before the change takes effect. Customers may object to changes in accordance with the DPA.
Questions
For questions about our sub-processors or to request copies of our transfer agreements, contact: info@aiverest.io