Last updated: August 6, 2026
NextAI Forge, LLC engages the third parties below to deliver Veribix. Each one processes data on our behalf under a contract with data protection obligations no less protective than our Data Processing Addendum.
We give at least thirty days' notice before adding or replacing a subprocessor, by updating this page and emailing account holders. Customers may object on reasonable data protection grounds, as set out in section 7 of the DPA.
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Vercel Inc. | Website and application hosting | Request metadata, IP address, security logs | United States |
| Supabase Inc. | Application database and authentication | Account records, configuration, measurement records, aggregated analytics data | United States |
| Cloudflare, Inc. | DNS, network protection, and content delivery | Request metadata, IP address | Global edge network |
| Stripe, Inc. | Payment processing and tax calculation | Billing contact, transaction metadata, tax jurisdiction. Card details go directly to Stripe and are never held by us | United States |
| Resend, Inc. | Transactional email delivery | Recipient email address, message content of alerts, digests, and billing notices | United States |
| Google LLC | Google Analytics 4 on veribix.com itself, loaded only for visitors who accept it | IP address, page views, referrer, device and browser characteristics of visitors to our own marketing site | United States |
These providers receive prompt text only. They do not receive a customer's analytics data, log data, account details, or any personal data of a customer's website visitors.
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| OpenAI, L.L.C. | AI answer measurement | Prompt text only, no customer personal data | United States |
| Perplexity AI, Inc. | AI answer measurement | Prompt text only, no customer personal data | United States |
| Anthropic PBC | AI answer measurement | Prompt text only, no customer personal data | United States |
| Google LLC | AI answer measurement, and read-only access to a customer's own Analytics and Search Console property when the customer grants it | Prompt text for measurement. For analytics access, the data already belongs to the customer's own Google property and is read under a service account the customer authorises | United States |
Google appears in three distinct roles, and only two of them are a transfer of data to Google. For measurement, we send prompt text to Google's models. For customer analytics, we read a customer's own Google Analytics and Search Console data through a service account the customer adds as a Viewer; that data is already held by Google as the customer's own processor, and access ends when the customer removes the service account — nothing about the customer's visitors is newly disclosed to Google.
Separately, we run Google Analytics 4 on our own marketing site. That one does send data about our visitors to Google, which is why it is loaded only after a visitor accepts it, as described in section 7 of the Privacy Policy.
Questions about this list: privacy@veribix.com
NextAI Forge, LLC
131 Continental Dr, Suite 305
Newark, Delaware 19713
United States