Subprocessors

Last updated 22 July 2026

We use the following third parties to run BA | Signet.

Infrastructure and storage

Hosting and serverless compute: Vercel. Application database (accounts, requests, certificates): Neon, a managed PostgreSQL provider (United States), under standard contractual clauses for any transfer of personal data.

Authentication, email and payments

Sign-in providers a requester may choose to use: Google, Microsoft, GitHub. Transactional email, including sign-in links: Brevo. Payments: Stripe. These see a requester's email or billing data, not a counterparty's signing data beyond what a certificate contains.

Public networks used for proof

Anchoring publishes a hash to the Polygon and Bitcoin networks via public infrastructure and the OpenTimestamps calendar network. These are public, permissionless networks, not subprocessors in the usual sense; what they receive is a one-way hash of a certificate.