Legal
Sub-processors
Version v2 · Last updated: 22 October 2026 · Draft pending legal review
Darify engages the third parties below to help provide the service. Each is bound by a written contract with data protection obligations no less protective than our own, and we remain responsible for their performance. We give notice before adding or replacing a sub-processor in a way that materially changes how your data is handled — see our Data Processing Agreement.
| Sub-processor | Purpose | Data received | Location |
|---|---|---|---|
| Microsoft Azure | Cloud hosting, databases, file storage, backups | All platform and CRM data at rest, including verification documents | UAE (UAE North) |
| Microsoft Azure OpenAI Service | Automated document reading for verification | Emirates ID, trade licence and broker card images submitted for verification | Sweden (EU) |
| Amazon Web Services (Amplify) | Hosting and delivery of the web application | Connection data such as IP address and browser details; CRM records and documents go directly to our UAE servers and do not pass through it | Sweden (EU) |
| Anthropic | AI Studio, Ask Darify, listing checks | Prompts, attached files, scoped CRM records (contact details partly masked), listing content | United States |
| Meta Platforms (Instagram & Facebook Graph) | Creator social-account connection | Public handle, user id, follower count | United States / global |
| Stripe | Subscription and lead-fee payment processing | Cardholder and billing data, payer name and email | United States / EU |
| Google (Sign-In & YouTube Data API) | Social sign-in; creator YouTube connection | Account identity; public channel name and subscriber count | United States / global |
| TikTok | Creator social-account connection | Public profile basics and follower statistics | Global |
| X (Twitter) | Creator social-account connection | Username and public follower metrics | United States / global |
| Snap (Login Kit) | Creator account-ownership verification | Display name and external id only | United States / global |
| Resend | Transactional email (invitations, receipts, notifications) | Recipient email address and message content | United States |
| Dubai Land Department / Dubai Pulse | Licence and advertising-permit validation | Agency and broker licence identifiers submitted for checking | UAE |
Where a sub-processor is located outside the UAE, transfers rely on the conditions permitted by the UAE Personal Data Protection Law. Questions, or to object to a sub-processor on reasonable data protection grounds: privacy@darify.ae.