ESSENTIAL SERVICE PROVIDERS / EFFECTIVE JULY 22, 2026
Limited use of essential providers.
Verahelm uses a limited set of contracted providers only where needed to operate and protect the service. They receive only the data reasonably necessary for the assigned function and may not use Verahelm customer content for unrelated purposes.
| Provider | Function | Data received |
|---|---|---|
| Cloudflare, Inc. | Hosting, content delivery, DDoS protection, and Turnstile human verification | Request metadata; transient challenge signals (pass/fail result only returned to Verahelm) |
| Resend (Plus Five Five, Inc.) | Transactional email (access codes, service notices) | Recipient email address and transactional message content |
| Stripe, Inc. | Hosted checkout, subscription billing, and billing portal | Billing contact details and payment instrument details (collected and held by Stripe, never by Verahelm) |
Verahelm does not disclose sensitive operational details, credentials, or proprietary evaluation methods on the public site. Current provider-specific disclosures required by an applicable signed data-processing agreement are available to eligible customers through privacy@verahelm.com.
Provider changes that materially affect processing will be reflected in the Privacy Notice or communicated as required by an applicable agreement or law.