Trust Center

Security, privacy, and compliance information for RocketVerifier.

GDPR Posture

RocketVerifier acts as a data processor for email addresses you submit for verification. We support data subject rights including access, rectification, export, and erasure.

  • Configurable data retention (default 90-day auto-deletion)
  • Self-service data export and account deletion in Billing settings
  • Data Processing Agreements available for enterprise customers
  • EU-friendly infrastructure options via Supabase and Railway

Subprocessors

ProviderPurposeLocation
StripePayment processingUSA / EU
ResendTransactional email deliveryUSA
VercelApplication hosting (frontend)Global edge
RailwayAPI & worker infrastructureUSA / EU
SupabaseManaged PostgreSQL databaseUSA / EU

Security Practices

  • API keys stored as SHA-256 hashes. Raw keys shown only once at creation
  • Passwords hashed with bcrypt; optional TOTP two-factor authentication
  • TLS encryption in transit for all API and dashboard traffic
  • Cloudflare Turnstile bot protection on signup and login
  • Restricted production access with audit logging for admin actions
  • Session management with device tracking and remote revocation

DPA & Privacy Contacts

DPA requests: legal@rocketverifier.com

Privacy inquiries: privacy@rocketverifier.com

Privacy PolicyTerms of ServiceSystem Status