Partner & Program Subprocessors
The provider list for the public qualification flow—without checkout or production-upload providers.
Last updated: 17 July 2026
This list applies to partners.attestlayer.com and program.attestlayer.com public qualification. That flow has no checkout, payment-card collection, source-record upload, or third-party product analytics. A later paid service may have a different list stated in its notice or executed agreement.
Abuse prevention for this flow is first-party: the browser computes a short-lived proof from a signed challenge. The challenge is bound to the submitted email, request network, and site host. No qualification challenge is sent to a third-party CAPTCHA provider.
| Provider | Purpose | Processing location | Use |
|---|---|---|---|
| Google Cloud Platform | Hosting, compute, networking, security logging, and application infrastructure. | Primary application workload: Montréal, Canada; support and security processing may occur elsewhere under provider terms. | Active |
| Google Workspace (Gmail) | Business mailbox receipt, correspondence, and account administration. | Canada and other Google processing locations under provider terms. | Active |
| SendGrid (Twilio) | Delivery of the internal qualification message and applicant acknowledgement email. Open and click tracking are disabled by the application. | United States and other Twilio processing locations under provider terms. | Active for submitted qualification email |
Questions or objections may be sent to privacy@attestlayer.com. See also Privacy and Security.