Subprocessors

Version 3 · Last updated: 21 September 2026 · Version française

What this page lists

The providers that process personal data on Evidiq’s behalf, with their role and the location of the processing. This page is versioned: every change is dated in the log at the bottom. It complements the privacy policy.

List of subprocessors

OVHcloud (OVH SAS)
Hosting of the servers, the database and the proof files. Processing in France.
Brevo
Sending of sign-in and service emails. Receives your email address. Processing in the European Union.
Google Play
Distribution of the app and payment processing for proof packs. Google acts under its own terms for the payment; Evidiq does not receive your banking details.
RevenueCat
Technical management of in-app purchases. Receives only an opaque account identifier: no email address, no banking details, no content. Location of processing: not confirmed to date; it will be published here once verified.
AI-generated-content detection provider
Automated analysis of photos and videos to detect AI-generated or AI-manipulated content. Receives the complete sealed file, for the duration of the analysis. We do not name this provider publicly: publishing its name would help fraudsters tune their content to evade its detection. Its identity is disclosed on legitimate request (contracted customer, supervisory authority) at contact@evidiq.io. Processing may take place outside the European Union; the country and the contractual safeguards of the transfer will be published here as soon as they are contractualised.
Geoapify
Location map shown on a proof’s page, and address suggestions when a request is entered. Receives a coordinate (exact for the business dashboard, rounded to about 11 km for the public verification page) or the address typed, with no identifier and no content. Processing in the European Union (Germany, Finland), under Geoapify’s data processing agreement.
Firebase Crashlytics (Google)
Crash reports from the mobile application, so their causes can be fixed. Receives the error trace, the device model, the system version, an installation identifier belonging to that service and, while you are signed in, your account identifier. It receives neither your email address, nor your proofs, nor their location. Place of processing: not confirmed to date; it will be published here once verified.

Other recipients

These services receive a piece of data to provide us with a public service, under their own terms, without acting on our instructions or under a processing agreement.

MET Norway (Norwegian Meteorological Institute)
Weather at the place and time of capture, shown to business customers on the proof’s page. Receives the capture position rounded to about 1 km, without the time, with no identifier and no content. A Norwegian public body, in Norway (European Economic Area). Weather data published under the CC BY 4.0 licence.

Change log