Twilio Inc. is listed at US location for email reminders under the Applicant Form product. The row follows the SDK row; the 'All Entrust Identity Verification Services' rows come after it.
All Entrust Identity Verification Services use AWS hosting with an EU, Canada or US choice
For 'All Entrust Identity Verification Services', Amazon Web Services is listed for data hosting, with the customer choosing whether their data is stored in AWS' EU, Canada or US instance. A second AWS row lists Canada/EU/US locations for data processing and automation services.
Details not recorded for this card
Supporting quotations
All Entrust Identity Verification Services Amazon Web Services (AWS) Customer chooses whether their data is stored in AWS’ EU, Canada or US instance Data hosting
referred to by (model-proposed): Document Check human reviewers access data from India and Vietnam/Bulgaria — The Document Check human-review rows say data is stored in the customer's choice of AWS servers '(see below)'; the AWS hosting row further down for All Entrust Identity Verification Services supplies the EU, Canada or US instance choice.
Datadog monitors applications for All Entrust Identity Verification Services
Datadog Inc is listed at US location for real-time application performance monitoring for 'All Entrust Identity Verification Services'.
Details not recorded for this card
Supporting quotations
Datadog Inc US Real-time application performance monitoring
Use & Processing · Company practice
All Entrust Identity Verification Services use support providers in India and Vietnam/Bulgaria
For 'All Entrust Identity Verification Services', Concentrix (access from India, Vietnam and/or Bulgaria), WNS (access from India) and Mas Callnet (access from India) are listed for customer support and quality assurance, with data stored in the customer's choice of AWS servers as described above. These rows are not marked '[Optional]'.
Details not recorded for this card
Supporting quotations
Concentrix CX UK Limited Data is stored in Customer’s choice of AWS servers (see above) but accessed from India, Vietnam, and/or Bulgaria Customer support and quality assurance
WNS Global Services (UK) Limited Data is stored in Customer’s choice of AWS servers (see above) but accessed from India Customer support and quality assurance
Mas Callnet India Pvt. Ltd. Data is stored in Customer’s choice of AWS servers (see above) but accessed from India Customer support and quality assurance
Qualifications & exceptions
The Location column distinguishes storage in the customer's choice of AWS servers from access from the listed countries.
These customer-support rows do not print the '[Optional]' marker used on the product-level human-review rows.
Not stated here
The page does not define what '[Optional]' means or whether its absence here has any effect.
The page also lists sub-processors for other Entrust product families
After the Identity Verification Services rows, the table continues under the heading 'Entrust Digital Security, Identity, and Platform Services' with sub-sections for PKI Hosted Services, Identity and Access Management, Identity Verification, Instant Issuance, Digital Card Solution, Signhost and KeyControl as a Service. The cards for those rows describe that part of the page; they are outside the assigned Entrust Identity Verification Services document.
Details not recorded for this card
Supporting quotations
Entrust Digital Security, Identity, and Platform Services
Qualifications & exceptions
These rows concern an Entrust product family other than the assigned Entrust Identity Verification Services document; the page does not state that Affirm uses these products.
Not stated here
The page does not explain the relationship among these product families or which contracts cover them.
Sharing & Disclosure · Company practice
PKI Hosted Services use AWS, Telesign, Twilio and Microsoft Azure
Under PKI Hosted Services: Verified PKIaaS lists Amazon Web Services (US/LATAM/EU) for data hosting, Telesign (US/EU) and Twilio (US) as SMS authenticators; Managed MS CA lists Telesign (US/EU) as passcode provider and Microsoft Azure (US) for data hosting; PKI as a Service (PKIaaS) lists Amazon Web Services (US) for data hosting, Telesign (US/EU) as SMS authenticator and Twilio (US) as SMS authenticator.
These rows concern an Entrust product family other than the assigned Entrust Identity Verification Services document; the page does not state that Affirm uses these products.
Sharing & Disclosure · Company practice
Identity as a Service and Identity Enterprise use AWS, Telesign and Twilio
Under Identity and Access Management: Identity as a Service lists Amazon Web Services (US/LATAM/EU) for data hosting, Telesign (US/EU) as SMS authenticator and Twilio (US) as SMS authenticator; Identity Enterprise lists Telesign (US/EU) as passcode provider.
These rows concern an Entrust product family other than the assigned Entrust Identity Verification Services document; the page does not state that Affirm uses these products.
Sharing & Disclosure · Company practice
Identity Essentials uses eight passcode providers and Azure hosting
Under Identity Essentials, Entrust lists BudgetSMS (EU), Link Mobility (EU), Bird (EU), Spirius (EU), Swissphone (EU), Twilio (US) and Vonage (Nexmo) (US) as passcode providers, Microsoft Azure (US/EU) for data hosting, and Telesign (US/EU) as passcode provider.
Details not recorded for this card
Supporting quotations
Identity Essentials BudgetSMS EU Passcode provider
These rows concern an Entrust product family other than the assigned Entrust Identity Verification Services document; the page does not state that Affirm uses these products.
Sharing & Disclosure · Company practice
Identity Verification (IDVaaS) uses AWS, Inverid and iProov
Under the Identity Verification sub-section, Identity Verification as a Service (IDVaaS) lists Amazon Web Services (Canada/UK) for data hosting, Inverid B.V. (Canada/UK) for document authenticity verification, and iProov (EU/UK) for liveness detection.
These rows concern an Entrust product family other than the assigned Entrust Identity Verification Services document; the page does not state that Affirm uses these products.
Sharing & Disclosure · Company practice
Instant Issuance uses AWS and Google for data hosting
Under Instant Issuance, Instant ID Issuance as a Service (IIDaaS) lists Amazon Web Services (US/EU) and Google (US) for data hosting.
These rows concern an Entrust product family other than the assigned Entrust Identity Verification Services document; the page does not state that Affirm uses these products.
Sharing & Disclosure · Company practice
Digital Card Solution products use AWS and Claranet for hosting administration
For every listed Digital Card Solution product (The One Digital Card, NFC Issuer Wallet, Issuer TSP Hub, Secure Interface, SCA, Token Manager and X-Pay Push Provisioning), the table lists Amazon Web Services (US/EU) and Claranet (EU) for data hosting administration.
These rows concern an Entrust product family other than the assigned Entrust Identity Verification Services document; the page does not state that Affirm uses these products.
Each product row repeats the same pair of providers: AWS at US/EU and Claranet at EU, both for data hosting administration.
Sharing & Disclosure · Company practice
Signhost standard signing uses CloudVPS, OptimaData and Bird; login uses Anoigo and SURF
Under Signhost: Standard Signing lists CloudVPS B.V. (EU) for object storage and hosting, OptimaData B.V. (EU) for database maintenance and Bird (EU) for email services; SMS lists Bird (EU) for SMS verification; DigiD lists Anoigo Services Limited (EU) for DigiD verification; SURFconext lists SURF B.V. (EU) for a verification/login method.
Details not recorded for this card
Supporting quotations
Signhost
Standard Signing CloudVPS B.V. EU Object storage and hosting
These rows concern an Entrust product family other than the assigned Entrust Identity Verification Services document; the page does not state that Affirm uses these products.
Use & Processing · Company practice
QES/Qseal uses ZealiD for qualified electronic signatures
Under the product 'Qualified Electronic Signatures (QES)/Qseal', ZealiD AB is listed at EU location for qualified electronic signatures.
Details not recorded for this card
Supporting quotations
Qualified Electronic Signatures (QES)/Qseal ZealiD AB EU Qualified electronic signatures
Qualifications & exceptions
These rows concern an Entrust product family other than the assigned Entrust Identity Verification Services document; the page does not state that Affirm uses these products.
Use & Processing · Company practice
Namirial is also listed for qualified signatures and seal certificates
In the same QES/Qseal section, Namirial SpA is listed at EU location. The row's Purpose of Processing column has two lines: it issues a qualified electronic signature, and it issues a qualified seal certificate/seals document.
These rows concern an Entrust product family other than the assigned Entrust Identity Verification Services document; the page does not state that Affirm uses these products.
The two purpose lines share table row 99 with the Namirial sub-processor and EU location cells.
The row leaves the Product column empty, so its product label is the QES/Qseal label above it.
Not stated here
The page does not identify which entity issues the seal certificate as opposed to the signature.
Use & Processing · Company practice
NFC uses Inverid for identification services
Under the NFC product, Inverid B.V. is listed at EU/UK location for identification services.
These rows concern an Entrust product family other than the assigned Entrust Identity Verification Services document; the page does not state that Affirm uses these products.
Use & Processing · Company practice
Passport/Selfie Check uses Mitek for identification services
Under the Passport/Selfie Check product, Mitek Systems B.V. is listed at EU/US location for identification services.
These rows concern an Entrust product family other than the assigned Entrust Identity Verification Services document; the page does not state that Affirm uses these products.
Sharing & Disclosure · Company practice
All Signhost Products use AWS in the EU for hosting administration
For 'All Signhost Products', Amazon Web Services is listed at EU location for data hosting administration.
These rows concern an Entrust product family other than the assigned Entrust Identity Verification Services document; the page does not state that Affirm uses these products.
Sharing & Disclosure · Company practice
Signhost uses GlobalOrange for its mobile application and My Cubes for forms
In the rows beneath the 'All Signhost Products' label, GlobalOrange B.V. (EU) is listed for development and maintenance of the mobile application, and My Cubes B.V. (EU) is listed for forms functionality.
Details not recorded for this card
Supporting quotations
GlobalOrange B.V. EU Development and maintenance of mobile application
These rows concern an Entrust product family other than the assigned Entrust Identity Verification Services document; the page does not state that Affirm uses these products.
Both rows leave the Product column empty, so their product label is 'All Signhost Products' above them.
Sharing & Disclosure · Company practice
KeyControl as a Service uses AWS in the EU and US for data hosting
Under the 'KeyControl as a Service' product section, Amazon Web Services is listed at EU/US location for data hosting.
These rows concern an Entrust product family other than the assigned Entrust Identity Verification Services document; the page does not state that Affirm uses these products.
The product name appears both as the full-width section label and in the row's Product column.
Sharing & Disclosure · Company practice
All Entrust Products and Services use Wipro for support and quality assurance
For 'All Entrust Products and Services', Wipro Ltd. provides customer support and quality assurance. The Location column says data is stored on AWS in regions determined by the service configuration, including customer-selected or Entrust-selected locations, and may be accessed by authorized personnel located in India.
Details not recorded for this card
Supporting quotations
All Entrust Products and Services
All Entrust Products and Services Wipro Ltd. Data is stored on AWS in regions determined by the service configuration (including customer-selected or Entrust-selected locations) and may be accessed by authorized personnel located in India. Customer support and quality assurance
Qualifications & exceptions
The storage location follows the service configuration and may be customer-selected or Entrust-selected.
Access is by authorized personnel located in India, separately from where data is stored.
Not stated here
The page does not list the specific AWS regions or explain how Entrust selects a region when the customer does not.
Legal Rights & Agreement Rules · Context
The sub-processor list is dated August 13, 2026
The page ends with 'Last updated: August 13, 2026', which dates this version of the sub-processor list.
Details not recorded for this card
Supporting quotations
Last updated: August 13, 2026
Qualifications & exceptions
The date is the page's stated last-updated date; the page does not state a separate effective date.
Not stated here
The page does not describe how or when updates are announced; the separate subscription prompt supplies no terms.
Sharing & Disclosure · Company practice
Entrust uses sub-processors and may transfer data within its group
Entrust states that it uses sub-processors and may also transfer data within the Entrust Group to support the delivery of its products and services. It presents the table below as its current sub-processor list and gives privacy@entrust.com for questions.
Details not recorded for this card
Supporting quotations
Entrust uses sub-processors and may also transfer data within the Entrust Group to support the delivery of its products and services. Below is our current sub-processor list. If you have questions, please contact privacy@entrust.com.
Qualifications & exceptions
The transfer permission covers the Entrust Group as well as external sub-processors.
The stated purpose is support for the delivery of Entrust's products and services, not an open-ended purpose.
Not stated here
The page does not identify the entities in the Entrust Group or the terms of intra-group transfers.
Sharing & Disclosure · Context
The table has Product, Sub-Processor, Location and Purpose of Processing columns
The list is presented as a table with columns headed Product, Sub-Processor, Location and Purpose of Processing. Only some rows fill the Product column; rows beneath a named product leave it empty, so the nearest product named above is the product label for those rows.
Details not recorded for this card
Supporting quotations
Product Sub-Processor Location Purpose of Processing
Qualifications & exceptions
The table has 108 rows and 4 columns; rows that open a product section span all four columns.
Not stated here
The page does not state whether an empty Product cell can ever mean something other than continuation of the product above.
Sharing & Disclosure · Context
The first table section is Entrust Identity Verification Services
The first product section of the table is 'Entrust Identity Verification Services', printed as a row that spans the table's full width. The sub-processor rows that follow it are listed under that product family.
Details not recorded for this card
Supporting quotations
Entrust Identity Verification Services
Qualifications & exceptions
The assigned Affirm document is the Entrust Identity Verification Services sub-processor document; the same page also lists sub-processors for other Entrust product families further down.
Not stated here
The page does not state which Entrust contracting entity or service configuration applies to a particular customer.
Sharing & Disclosure · Company practice
Melissa Data parses addresses for the Document Check products
For Document Check, Document Check - Video and Document Check - Driver Verification, Melissa Data Ltd is listed at EU, UK, US and Canada locations for an address parsing service.
Details not recorded for this card
Supporting quotations
Document Check / Document Check - Video / Document Check - Driver Verification Melissa Data Ltd EU, UK, US, Canada Address parsing service
Use & Processing · Company practice
TrustID is listed for optional Amberhill fraud detection
TrustID Ltd, listed at UK location, appears in the Document Check group for 'Amberhill fraud detection.' The row marks the purpose '[Optional]'.
Details not recorded for this card
Supporting quotations
TrustID Ltd UK Amberhill fraud detection. [Optional]
Qualifications & exceptions
The row prints '[Optional]' after the purpose.
Not stated here
The page does not define what '[Optional]' means here, for example whether the customer elects the check or it applies only to some Document Check configurations.
Use & Processing · Company practice
Document Check human reviewers access data from India and Vietnam/Bulgaria
In four rows beneath the Document Check product label, Mas Callnet and Teleperformance are listed with data stored in the customer's choice of AWS servers but accessed from India; Concentrix with access from India, Vietnam and/or Bulgaria; and WNS with access from India. Each row states human review as the purpose and prints '[Optional]'.
Details not recorded for this card
Supporting quotations
Mas Callnet India Pvt. Ltd. Data is stored in Customer’s choice of AWS servers (see below) but accessed from India Human review. [Optional]
Concentrix CX UK Limited Data is stored in Customer’s choice of AWS servers (see below) but accessed from India, Vietnam, and/or Bulgaria Human review. [Optional]
WNS Global Services (UK) Limited Data is stored in Customer’s choice of AWS servers (see below) but accessed from India Human review. [Optional]
Qualifications & exceptions
The Location column distinguishes storage in the customer's choice of AWS servers from access from the listed countries.
Each of these four rows prints '[Optional]'.
The rows say '(see below)' for the AWS storage choice; that later storage row is not quoted in this card.
Not stated here
The page does not define '[Optional]' or list the AWS regions the customer may choose.
Amazon Location Service verifies addresses in the Document Check group
Amazon Location Service is listed with data stored in the customer's choice of AWS servers for address verification. The row leaves the Product column empty, so its product label is the Document Check label above it.
Details not recorded for this card
Supporting quotations
Amazon Location Service Data is stored in Customer’s choice of AWS servers Address verification
Qualifications & exceptions
The row names no product in the Product column.
Use & Processing · Company practice
Facial Similarity Check human reviewers access data from India and Vietnam/Bulgaria
For Facial Similarity Check, Concentrix (accessed from India, Vietnam and/or Bulgaria), Mas Callnet (accessed from India) and WNS (accessed from India) are listed for human review, with data stored in the customer's choice of AWS servers. Each row prints '[Optional]'.
Details not recorded for this card
Supporting quotations
Facial Similarity Check Concentrix CX UK Limited Data is stored in Customer’s choice of AWS servers (see below) but accessed from India, Vietnam, and/or Bulgaria Human review. [Optional]
Mas Callnet India Pvt. Ltd. Data is stored in Customer’s choice of AWS servers (see below) but accessed from India Human review. [Optional]
WNS Global Services (UK) Limited Data is stored in Customer’s choice of AWS servers (see below) but accessed from India Human review. [Optional]
Qualifications & exceptions
The Location column distinguishes storage in the customer's choice of AWS servers from access from the listed countries.
Each of these three rows prints '[Optional]'.
Not stated here
The page does not define '[Optional]' or list the AWS regions the customer may choose.
Microsoft converts speech to text for optional Facial Similarity Check - Video
Microsoft Ireland Operations Limited is listed for 'Converts speech to text.' The row says West Europe, East US and Canada-Central Microsoft regions are used depending on which AWS servers store the data, and marks the service '[Optional and only relevant to Facial Similarity Check - Video]'.
Details not recorded for this card
Supporting quotations
Microsoft Ireland Operations Limited West Europe, East US, and Canada-Central Microsoft regions are used depending on which AWS servers are used for data storage (see below) Converts speech to text. [Optional and only relevant to Facial Similarity Check - Video]
Qualifications & exceptions
The optional marker limits the service to Facial Similarity Check - Video.
The region used depends on the AWS servers chosen for data storage.
Use & Processing · Company practice
Identity Record Check uses database-search and address-validation providers
For Identity Record Check, Entrust lists Aristotle International (UK/US), Equifax Limited (UK), Experian Limited (UK) and London Stock Exchange Group (EU/UK/US/LATAM/India) for database search, and Melissa Data Limited (Canada/EU/UK/US) for an address validation service.
Ongoing watchlist checks are beta-only and use Comply Advantage
The product row 'Watchlist Check – Watchlist Standard Ongoing, Watchlist AML Ongoing' lists Comply Advantage (EU/UK) for sanctions checks. The product name states that these ongoing checks are 'available in Beta only'.
Details not recorded for this card
Supporting quotations
Watchlist Check – Watchlist Standard Ongoing, Watchlist AML Ongoing (available in Beta only) Comply Advantage EU/UK Sanctions check
Qualifications & exceptions
The beta limitation is part of the product name in the Product column; it is not a footnote or a separate term.
Not stated here
The page does not explain what beta status changes about availability, support or data handling.
Use & Processing · Company practice
Street Level Verification Check uses Stannp for address confirmation
Stannp Ltd is listed at EU location for address confirmation under the Street Level Verification Check product.
Details not recorded for this card
Supporting quotations
Street Level Verification Check Stannp Ltd EU Address confirmation
Use & Processing · Company practice
UK Address Picker uses Equifax for address lookup
Equifax Limited is listed at UK location for address lookup under the UK Address Picker product.
Proof of Address Check uses human review and Melissa address validation
For Proof of Address Check, Concentrix (accessed from India, Vietnam and/or Bulgaria) and Mas Callnet (accessed from India) are listed for human review with data stored in the customer's choice of AWS servers, and Melissa Data Ltd. (Canada/EU/UK/US) is listed for an address autocompletion and validation service.
Details not recorded for this card
Supporting quotations
Proof of Address Check Concentrix CX UK Limited Data is stored in Customer’s choice of AWS servers (see below) but accessed from India, Vietnam, and/or Bulgaria Human review
Mas Callnet India Pvt., Ltd. Data is stored in Customer’s choice of AWS servers (see below) but accessed from India Human review
Melissa Data Ltd. Canada/EU/UK/US Address autocompletion and validation service
Qualifications & exceptions
The Proof of Address Check human-review rows do not repeat the '[Optional]' marker printed on the earlier human-review rows.
Not stated here
The page does not explain whether the missing '[Optional]' marker changes the service's optional status.
Use & Processing · Company practice
AAMVA Check uses Trusona for database search
Trusona Inc. is listed at US location for database search under the AAMVA Check product.
London Stock Exchange Group (LSEG) is listed at EU/UK/US/LATAM/India locations for database search under the product 'Query Country Databases – RENAPO / SAT'.
INE database queries use FIMPE for secure matching
FIMPE is listed at LATAM location for 'Secure transmission and authoritative matching' under the Query INE Database product.
Details not recorded for this card
Supporting quotations
Query INE Database FIMPE LATAM Secure transmission and authoritative matching
Use & Processing · Company practice
Device Intelligence - Standard uses AWS and Fingerprint
For Device Intelligence - Standard, Amazon Web Services is listed with data stored in the customer's choice of AWS servers for IP address lookup, and Fingerprint is listed at EU location for device intelligence signals.
Details not recorded for this card
Supporting quotations
Device Intelligence - Standard Amazon Web Services (AWS) Data is stored in Customer’s choice of AWS servers (see below) IP address lookup
Namirial SpA is listed at EU location for issuance of a qualified electronic certificate and provision of a sealed evidence file under the Qualified Electronic Signature Package product.
Details not recorded for this card
Supporting quotations
Qualified Electronic Signature Package Namirial SpA EU Issuance of qualified electronic certificate Provision of sealed evidence file
Use & Processing · Company practice
One-Time Password uses Twilio for phone number confirmation
Twilio Inc. is listed at US location for 'Phone number confirmation.' under the One-Time Password product.
Details not recorded for this card
Supporting quotations
One-Time Password Twilio Inc. US Phone number confirmation.
Use & Processing · Company practice
SDK uses Twilio as an optional SMS authenticator
Twilio Inc. is listed at US location for 'SMS authenticator.' under the Software Development Kit (SDK) product; the row prints '[Optional]'.
Details not recorded for this card
Supporting quotations
Software Development Kit (SDK) Twilio Inc. US SMS authenticator. [Optional]
Qualifications & exceptions
The row prints '[Optional]'.
Not stated here
The page does not define what '[Optional]' means for this row.