TLDR: Thirdfort stores verification reports on its platform using Google Cloud servers in London. It uses trusted third-party providers, some processing data outside the UK only when necessary and legally permitted. Thirdfort ensures data protection through rigorous measures and complies with GDPR and DPA. More details are available in their privacy policy and security measures documentation.
Data Storage
When you have completed your tasks and your verification check, a report containing verification results will be generated for the organisation that requested it. This report is stored on the Thirdfort platform for the organisation to access and download. Thirdfort uses Google Cloud data servers located in London to host our platform and store our data.
Third Party Data Processing
In order to verify your information and provide services in general, Thirdfort uses a number of trusted third parties. Depending on the tasks you have been asked to complete, some third-party providers may process data outside of the UK. These third parties will process the data outside the EU only when absolutely necessary, and only for the duration needed to complete the verification and where a legal basis is available.
Thirdfort conducts extensive due diligence on third-party providers. We have put in place robust organisational and technical measures to ensure that your data is being processed safely, securely and in line with data protection laws, regardless of where they are being processed. You can find a summary of our security measures at https://www.thirdfort.com/security-measures/.
Only data that is strictly necessary to be processed outside of the EU is processed, and for the shortest possible time, in order to be verified. This does not affect any of your rights under GDPR or DPA, and you can read more about how to request that your information is deleted here.
More Information
If you would like more information about the third parties Thirdfort uses and how information is processed, you can find our privacy policy here. This, along with our terms and conditions, is also available within the Thirdfort app, and no information can be submitted to Thirdfort before this is agreed to.