Entrust Sub-processors (Identity Verification Services)

Affirm · agreement dated August 13, 2026 · Official agreement

Read the agreement

17 of 46 cards in Sharing & Disclosure

Sharing & Disclosure · Company practice

All Entrust Identity Verification Services use AWS hosting with an EU, Canada or US choice

For 'All Entrust Identity Verification Services', Amazon Web Services is listed for data hosting, with the customer choosing whether their data is stored in AWS' EU, Canada or US instance. A second AWS row lists Canada/EU/US locations for data processing and automation services.

Details not recorded for this card

Supporting quotations

All Entrust Identity Verification Services Amazon Web Services (AWS) Customer chooses whether their data is stored in AWS’ EU, Canada or US instance Data hosting
Amazon Web Services (AWS) Canada/EU/US Data processing and automation services

Qualifications & exceptions

  • The storage location is the customer's choice among AWS' EU, Canada and US instances.
  • The second AWS row covers data processing and automation services, not only storage.

Not stated here

  • The page does not list the specific AWS regions or describe how the customer makes the storage choice.

Cross-references

Sharing & Disclosure · Context

The page also lists sub-processors for other Entrust product families

After the Identity Verification Services rows, the table continues under the heading 'Entrust Digital Security, Identity, and Platform Services' with sub-sections for PKI Hosted Services, Identity and Access Management, Identity Verification, Instant Issuance, Digital Card Solution, Signhost and KeyControl as a Service. The cards for those rows describe that part of the page; they are outside the assigned Entrust Identity Verification Services document.

Details not recorded for this card

Supporting quotations

Entrust Digital Security, Identity, and Platform Services

Qualifications & exceptions

  • These rows concern an Entrust product family other than the assigned Entrust Identity Verification Services document; the page does not state that Affirm uses these products.

Not stated here

  • The page does not explain the relationship among these product families or which contracts cover them.

Sharing & Disclosure · Company practice

PKI Hosted Services use AWS, Telesign, Twilio and Microsoft Azure

Under PKI Hosted Services: Verified PKIaaS lists Amazon Web Services (US/LATAM/EU) for data hosting, Telesign (US/EU) and Twilio (US) as SMS authenticators; Managed MS CA lists Telesign (US/EU) as passcode provider and Microsoft Azure (US) for data hosting; PKI as a Service (PKIaaS) lists Amazon Web Services (US) for data hosting, Telesign (US/EU) as SMS authenticator and Twilio (US) as SMS authenticator.

Details not recorded for this card

Supporting quotations

PKI Hosted Services
Verified PKIaaS Amazon Web Services (AWS) US/LATAM/EU Data hosting
Telesign US/EU SMS authenticator
Twilio, Inc. US SMS authenticator
Managed MS CA Telesign US/EU Passcode provider
Microsoft Azure US Data hosting
PKI as a Service (PKIaaS) Amazon Web Services (AWS) US Data hosting
Telesign US/EU SMS authenticator
Twilio, Inc. US SMS authenticator

Qualifications & exceptions

  • These rows concern an Entrust product family other than the assigned Entrust Identity Verification Services document; the page does not state that Affirm uses these products.

Sharing & Disclosure · Company practice

Identity as a Service and Identity Enterprise use AWS, Telesign and Twilio

Under Identity and Access Management: Identity as a Service lists Amazon Web Services (US/LATAM/EU) for data hosting, Telesign (US/EU) as SMS authenticator and Twilio (US) as SMS authenticator; Identity Enterprise lists Telesign (US/EU) as passcode provider.

Details not recorded for this card

Supporting quotations

Identity and Access Management
Identity as a Service Amazon Web Services (AWS) US/LATAM/EU Data hosting
Telesign US/EU SMS authenticator
Twilio Inc. US SMS authenticator
Identity Enterprise Telesign US/EU Passcode provider

Qualifications & exceptions

  • These rows concern an Entrust product family other than the assigned Entrust Identity Verification Services document; the page does not state that Affirm uses these products.

Sharing & Disclosure · Company practice

Identity Essentials uses eight passcode providers and Azure hosting

Under Identity Essentials, Entrust lists BudgetSMS (EU), Link Mobility (EU), Bird (EU), Spirius (EU), Swissphone (EU), Twilio (US) and Vonage (Nexmo) (US) as passcode providers, Microsoft Azure (US/EU) for data hosting, and Telesign (US/EU) as passcode provider.

Details not recorded for this card

Supporting quotations

Identity Essentials BudgetSMS EU Passcode provider
Link Mobility EU Passcode provider
Bird EU Passcode provider
Microsoft Azure US/EU Data hosting
Spirius EU Passcode provider
Swissphone EU Passcode provider
Twilio Inc. US Passcode provider
Vonage (Nexmo) US Passcode provider
Telesign US/EU Passcode provider

Qualifications & exceptions

  • These rows concern an Entrust product family other than the assigned Entrust Identity Verification Services document; the page does not state that Affirm uses these products.

Sharing & Disclosure · Company practice

Identity Verification (IDVaaS) uses AWS, Inverid and iProov

Under the Identity Verification sub-section, Identity Verification as a Service (IDVaaS) lists Amazon Web Services (Canada/UK) for data hosting, Inverid B.V. (Canada/UK) for document authenticity verification, and iProov (EU/UK) for liveness detection.

Details not recorded for this card

Supporting quotations

Identity Verification
Identity Verification as a Service (IDVaaS) Amazon Web Services (AWS) Canada/UK Data hosting
Inverid B.V. Canada/UK Document authenticity verification
iProov EU/UK Liveness detection

Qualifications & exceptions

  • These rows concern an Entrust product family other than the assigned Entrust Identity Verification Services document; the page does not state that Affirm uses these products.

Sharing & Disclosure · Company practice

Instant Issuance uses AWS and Google for data hosting

Under Instant Issuance, Instant ID Issuance as a Service (IIDaaS) lists Amazon Web Services (US/EU) and Google (US) for data hosting.

Details not recorded for this card

Supporting quotations

Instant Issuance
Instant ID Issuance as a Service (IIDaaS) Amazon Web Services (AWS) US/EU Data hosting
Google US Data hosting

Qualifications & exceptions

  • These rows concern an Entrust product family other than the assigned Entrust Identity Verification Services document; the page does not state that Affirm uses these products.

Sharing & Disclosure · Company practice

Digital Card Solution products use AWS and Claranet for hosting administration

For every listed Digital Card Solution product (The One Digital Card, NFC Issuer Wallet, Issuer TSP Hub, Secure Interface, SCA, Token Manager and X-Pay Push Provisioning), the table lists Amazon Web Services (US/EU) and Claranet (EU) for data hosting administration.

Details not recorded for this card

Supporting quotations

Digital Card Solution
The One Digital Card Amazon Web Services (AWS) US/EU Data hosting administration
Claranet EU Data hosting administration
NFC Issuer Wallet Amazon Web Services (AWS) US/EU Data hosting administration
Claranet EU Data hosting administration
Issuer TSP Hub Amazon Web Services (AWS) US/EU Data hosting administration
Claranet EU Data hosting administration
Secure Interface Amazon Web Services (AWS) US/EU Data hosting administration
Claranet EU Data hosting administration
SCA Amazon Web Services (AWS) US/EU Data hosting administration
Claranet EU Data hosting administration
Token Manager Amazon Web Services (AWS) US/EU Data hosting administration
Claranet EU Data hosting administration
X-Pay Push Provisioning Amazon Web Services (AWS) US/EU Data hosting administration
Claranet EU Data hosting administration

Qualifications & exceptions

  • These rows concern an Entrust product family other than the assigned Entrust Identity Verification Services document; the page does not state that Affirm uses these products.
  • Each product row repeats the same pair of providers: AWS at US/EU and Claranet at EU, both for data hosting administration.

Sharing & Disclosure · Company practice

Signhost standard signing uses CloudVPS, OptimaData and Bird; login uses Anoigo and SURF

Under Signhost: Standard Signing lists CloudVPS B.V. (EU) for object storage and hosting, OptimaData B.V. (EU) for database maintenance and Bird (EU) for email services; SMS lists Bird (EU) for SMS verification; DigiD lists Anoigo Services Limited (EU) for DigiD verification; SURFconext lists SURF B.V. (EU) for a verification/login method.

Details not recorded for this card

Supporting quotations

Signhost
Standard Signing CloudVPS B.V. EU Object storage and hosting
OptimaData B.V. EU Database maintenance
Bird EU Email services
SMS Bird EU SMS verification
DigiD Anoigo Services Limited EU DigiD verification
SURFconext SURF B.V. EU Verification/login method

Qualifications & exceptions

  • These rows concern an Entrust product family other than the assigned Entrust Identity Verification Services document; the page does not state that Affirm uses these products.

Sharing & Disclosure · Company practice

All Signhost Products use AWS in the EU for hosting administration

For 'All Signhost Products', Amazon Web Services is listed at EU location for data hosting administration.

Details not recorded for this card

Supporting quotations

All Signhost Products Amazon Web Services (AWS) EU Data hosting administration

Qualifications & exceptions

  • These rows concern an Entrust product family other than the assigned Entrust Identity Verification Services document; the page does not state that Affirm uses these products.

Sharing & Disclosure · Company practice

Signhost uses GlobalOrange for its mobile application and My Cubes for forms

In the rows beneath the 'All Signhost Products' label, GlobalOrange B.V. (EU) is listed for development and maintenance of the mobile application, and My Cubes B.V. (EU) is listed for forms functionality.

Details not recorded for this card

Supporting quotations

GlobalOrange B.V. EU Development and maintenance of mobile application
My Cubes B.V. EU Forms functionality

Qualifications & exceptions

  • These rows concern an Entrust product family other than the assigned Entrust Identity Verification Services document; the page does not state that Affirm uses these products.
  • Both rows leave the Product column empty, so their product label is 'All Signhost Products' above them.

Sharing & Disclosure · Company practice

KeyControl as a Service uses AWS in the EU and US for data hosting

Under the 'KeyControl as a Service' product section, Amazon Web Services is listed at EU/US location for data hosting.

Details not recorded for this card

Supporting quotations

KeyControl as a Service
KeyControl as a Service Amazon Web Services (AWS) EU/US Data Hosting

Qualifications & exceptions

  • These rows concern an Entrust product family other than the assigned Entrust Identity Verification Services document; the page does not state that Affirm uses these products.
  • The product name appears both as the full-width section label and in the row's Product column.

Sharing & Disclosure · Company practice

All Entrust Products and Services use Wipro for support and quality assurance

For 'All Entrust Products and Services', Wipro Ltd. provides customer support and quality assurance. The Location column says data is stored on AWS in regions determined by the service configuration, including customer-selected or Entrust-selected locations, and may be accessed by authorized personnel located in India.

Details not recorded for this card

Supporting quotations

All Entrust Products and Services
All Entrust Products and Services Wipro Ltd. Data is stored on AWS in regions determined by the service configuration (including customer-selected or Entrust-selected locations) and may be accessed by authorized personnel located in India. Customer support and quality assurance

Qualifications & exceptions

  • The storage location follows the service configuration and may be customer-selected or Entrust-selected.
  • Access is by authorized personnel located in India, separately from where data is stored.

Not stated here

  • The page does not list the specific AWS regions or explain how Entrust selects a region when the customer does not.

Sharing & Disclosure · Company practice

Entrust uses sub-processors and may transfer data within its group

Entrust states that it uses sub-processors and may also transfer data within the Entrust Group to support the delivery of its products and services. It presents the table below as its current sub-processor list and gives privacy@entrust.com for questions.

Details not recorded for this card

Supporting quotations

Entrust uses sub-processors and may also transfer data within the Entrust Group to support the delivery of its products and services. Below is our current sub-processor list. If you have questions, please contact privacy@entrust.com.

Qualifications & exceptions

  • The transfer permission covers the Entrust Group as well as external sub-processors.
  • The stated purpose is support for the delivery of Entrust's products and services, not an open-ended purpose.

Not stated here

  • The page does not identify the entities in the Entrust Group or the terms of intra-group transfers.

Sharing & Disclosure · Context

The table has Product, Sub-Processor, Location and Purpose of Processing columns

The list is presented as a table with columns headed Product, Sub-Processor, Location and Purpose of Processing. Only some rows fill the Product column; rows beneath a named product leave it empty, so the nearest product named above is the product label for those rows.

Details not recorded for this card

Supporting quotations

Product Sub-Processor Location Purpose of Processing

Qualifications & exceptions

  • The table has 108 rows and 4 columns; rows that open a product section span all four columns.

Not stated here

  • The page does not state whether an empty Product cell can ever mean something other than continuation of the product above.

Sharing & Disclosure · Context

The first table section is Entrust Identity Verification Services

The first product section of the table is 'Entrust Identity Verification Services', printed as a row that spans the table's full width. The sub-processor rows that follow it are listed under that product family.

Details not recorded for this card

Supporting quotations

Entrust Identity Verification Services

Qualifications & exceptions

  • The assigned Affirm document is the Entrust Identity Verification Services sub-processor document; the same page also lists sub-processors for other Entrust product families further down.

Not stated here

  • The page does not state which Entrust contracting entity or service configuration applies to a particular customer.

Sharing & Disclosure · Company practice

Melissa Data parses addresses for the Document Check products

For Document Check, Document Check - Video and Document Check - Driver Verification, Melissa Data Ltd is listed at EU, UK, US and Canada locations for an address parsing service.

Details not recorded for this card

Supporting quotations

Document Check / Document Check - Video / Document Check - Driver Verification Melissa Data Ltd EU, UK, US, Canada Address parsing service