Subprocessors
The other companies that handle personal data on Signitri’s behalf, what each one does with it, and where it sits.
Working draft, and the list below is incomplete.
This page is a draft. No lawyer has reviewed it, Signitri has not adopted it, and it is not yet the authoritative register. One entry is confirmed — ThisIsMe. Everything else is a category with a blank provider, because naming a company that has not been checked against a signed contract would put a wrong fact into other people’s compliance records. Do not use this page for a vendor assessment or a record of processing activities until the blanks are filled. Corrections go to hello@signitri.com.
A subprocessor is a company Signitri uses to help run the service, which as a result handles personal data belonging to you or to the people you ask to sign. Each one is engaged for a single stated purpose, under the terms in the data processing addendum.
Confirmed
| Subprocessor | What it does | Data it receives | Location |
|---|---|---|---|
| ThisIsMe | Identity verification. Receives the signer’s government photo ID, the data printed on it, and the selfie, and returns a verification result. | Government photo ID image and fields · ID number · selfie · name · date of birth | [TO BE CONFIRMED] |
ThisIsMe is central to the service rather than incidental to it. A customer who objects to ThisIsMe is objecting to identity verification, which cannot be switched off. That is worth saying here rather than leaving it to be discovered during a subprocessor objection.
[TO BE CONFIRMED: the ThisIsMe legal entity name, its registered country, the processing location, and the transfer mechanism between Signitri and ThisIsMe.]
Still to be confirmed
These are the roles the product needs filled. The provider column stays blank until each one is checked against a signed agreement.
| Role | What it does | Provider and location |
|---|---|---|
| Cloud hosting and compute | Runs the application | [TO BE CONFIRMED] |
| Document and object storage | Holds uploaded documents and sealed evidence packs | [TO BE CONFIRMED] |
| Database and backups | Holds account, recipient and audit records | [TO BE CONFIRMED] |
| Email delivery | Delivers signing links and completion notices | [TO BE CONFIRMED] |
| WhatsApp delivery | Delivers signing links over WhatsApp | [TO BE CONFIRMED] |
| Payments and subscriptions | Takes payment and holds card details | [TO BE CONFIRMED] |
| Error monitoring and logging | Records faults so they can be fixed | [TO BE CONFIRMED] |
| Product analytics | Measures how the product is used | [TO BE CONFIRMED] |
| Customer support tooling | Handles messages sent to Signitri | [TO BE CONFIRMED] |
| Document analysis | Reads a document to suggest where fields belong | [TO BE CONFIRMED] |
How you hear about a change
[TO BE CONFIRMED: the notification channel for a new or replaced subprocessor — a mailing list, an in-product notice, or a dated changelog on this page; the notice period before the change takes effect; and the window in which a customer may object.]
Objecting to a subprocessor
[TO BE CONFIRMED: what happens when a customer objects — whether Signitri must offer an alternative, whether the customer may terminate without penalty, and how that is reconciled with subprocessors the service cannot run without.]
Not subprocessors
The people you ask to sign are not subprocessors, and neither are the recipients of a completed document. They are data subjects, and where a sender forwards an evidence pack onward, that is the sender’s disclosure rather than Signitri’s.