Who helps us run KeyProof.

These are the third-party services (our sub-processors) that help us operate the site and, in time, the product. We keep this list current and, once we take on operators, we give notice before we add or change one.

What we use today

While KeyProof is pre-launch, the only personal data we handle is what you send through a form. These providers help us receive and look after it:

• Vercel hosts the website and delivers form submissions to us. US, under the UK Addendum to the standard contractual clauses.
• Neon is our database, where founding-spot enquiries and the operator cockpit live. Stored in a UK/EU region.
• Resend sends our transactional email. US, under standard UK transfer safeguards.
• Notion helps us keep track of enquiries. US, under standard UK transfer safeguards.
• Clerk provides secure login for the operator cockpit only, not renter data. US, under standard UK transfer safeguards.
• Upstash provides rate limiting to protect the forms. It holds no personal data.
• Vercel Web Analytics measures page traffic without cookies and without profiling anyone.

International transfers

Some of these providers are based outside the UK. Where your data is processed abroad, the transfer is covered by the safeguards UK data-protection law requires, such as the UK International Data Transfer Agreement, the UK Addendum to the EU standard contractual clauses, or the UK-US Data Bridge. We keep the most sensitive data in a UK/EU region wherever we can.

When the product goes live

The renter checks (identity and licence verification, e-signature and the deposit) are still in development and are not processing anyone's data yet. When they go live, the providers that handle that data, an identity-verification provider, a DVLA licence-check provider, an e-signature provider and Stripe for the deposit, will be added to this list, each under its own data-processing agreement. Nothing is added here before it is actually in use.

Changes and notice

We review these providers and their agreements at least once a year and at renewal. Once we have operators, we notify them before adding or replacing a sub-processor, and they can object. For who we are and how to reach us, see our privacy notice, or email privacy@keyproof.co.uk.