THIRD-PARTY PROCESSORS AND AFFILIATES

March 6, 2026

Sumsub (meaning Raritex Trade Ltd, incorporated in Cyprus with company number HE369578, and any legal entity affiliated therewith, referred to collectively) may engage third-party service providers for certain personal data processing activities in order to enable various Sumsub entities to efficiently provide products and services (“Sumsub Service(s)”) to customers and other counterparties as per their respective contractual obligations.

When a Sumsub entity contracts with such a service provider in its capacity as a data processor (or sub-processor, as may be applicable), that third-party service provider is a sub-processor of that Sumsub entity (“Sub-processor”). A Sub-processor may have access to personal data provided to a Sumsub entity (or, previously, to that Sub-processor) by Sumsub’s counterparties or their end-users.

Additionally, Sumsub entities themselves can also act as Sub-processors to other Sumsub entities as per Sumsub’s intra-group agreements.

The list below contains the currently engaged Sub-processors, along with the types of Sumsub Services (and/or, in the case of Sumsub entities, types of business processes) they help facilitate and other relevant details.

Before engaging any Sub-processor, Sumsub performs third-party (vendor) due diligence, including information security, data protection, legal, and AI compliance assessments. The Sub-processors are all subject to contractual terms that mandate compliance with applicable data protection laws.

Please note that, if the company you represent uses Sumsub Services, the exact list of Sub-processors involved in the processing of end-users’ personal data depends on the Sumsub Services your company is currently using and the Sumsub entity it contracted with.

IMPORTANT: if the company you represent uses Sumsub Services, you may only use the information below as necessary for that company to exercise its rights and fulfill its obligations under its contract with the respective Sumsub entity or under the applicable law. Using this information (or knowingly allowing it to be used) in a non-permitted manner (e.g., for commercial purposes) may be considered a repudiatory breach of contract and result in legal action.

Sumsub

The following Sumsub entities may act as Sub-processors:

Entity name	Country	Relevant Sumsub Service or business activity	Privacy Information	International data transfer mechanism
Sum and Substance Ltd	The UK	All services and business activities	Privacy Notice and Security and Compliance	EU Adequacy Decision for the UK, Brussels, 28 June 2021
Sumsub Ltd	Cyprus	All services and business activities		N/A
Sumsub Tech Ltd	Cyprus	All services and business activities
Raritex Trade Ltd	Cyprus	All services and business activities
Sumsub GmbH	Germany	Software development
Sumsub Inc	The US	Sales and customer management		Appropriate safeguards pursuant to article 46 of the EU GDPR and the UK GDPR: the Standard Contractual Clauses
Sumsub Technology LLC	UAE	Sales and customer management		Appropriate safeguards pursuant to article 46 of the EU GDPR and the UK GDPR: the Standard Contractual Clauses
Sumsub APAC Pte. Ltd.	Singapore	Sales and customer management		Appropriate safeguards pursuant to article 46 of the EU GDPR and the UK GDPR: the Standard Contractual Clauses
Sumsub Brasil LTDA	Brazil	Sales and customer management		EU Adequacy Decision for Brazil, Brussels, 26 January 2026

Other Sub-processors

Name	Country & Contact details	Function	Relevant Sumsub Service	International data transfer mechanism
AWS Amazon Amazon Web Services EMEA SARL	Luxembourg [email protected]	Data hosting for any Sumsub Service in the selected countries and regions: Germany – by default, other countries and regions – by request and if available. Apart from the above, Amazon Bedrock is used to extract unstructured data from the source of information (i.e. from documents) to support KYC Services.	All Sumsub Services	N/A
ComplyAdvantage IVXS UK Limited	The UK [email protected]	Software contributing to AML screening Services	KYC: AML screening Transaction monitoring: AML screening Travel Rule solution: AML screening	EU Adequacy Decision for the UK, Brussels, 28 June 2021
Egress Egress Software Technologies Limited	The UK [email protected]	DSAR request execution: secure data transfer platform	All Sumsub Services	EU Adequacy Decision for the UK, Brussels, 28 June 2021
Freshworks Freshworks Inc.	The US [email protected]	Backup system if there is a disconnection of Intercom	All Sumsub Services	Adequate level of protection pursuant to article 45 of the EU GDPR and the UK GDPR:EU–US Data Privacy Framework
Google Workspace Google Ireland Limited	Ireland [email protected]	Google workspace: email information exchange	All Sumsub Services	N/A
Google Cloud Google Cloud EMEA Limited	Ireland https://support.google.com/cloud/contact/dpo	Data hosting for any Sumsub Service where AWS Amazon region is unavailable. Geocoding API Cloud Vision API Cloud Translation API Document AI	All Sumsub Services	N/A
Intercom Intercom, Inc.	The US [email protected]	Client support in Sumsub’s interactive system (Dashboard) and ticketing / processing of the data subject requests	All Sumsub Services	Adequate level of protection pursuant to article 45 of the EU GDPR and the UK GDPR: EU–US Data Privacy Framework
Klaus Qualitista OÜ	Estonia [email protected]	Quality control of support in accordance with Sumsub’s contractual obligations	All Sumsub Services	N/A
Kyckr Kyckr Ireland Limited	Ireland [email protected]	Corporate information database for KYB	KYB	N/A
Monnai Monnai, Inc.	The US [email protected]	Software contributing to phone and email risk scoring services	Transaction Monitoring: fraud prevention	Appropriate safeguards pursuant to article 46 of the EU GDPR and the UK GDPR: the Standard Contractual Clauses
OpenAI OpenAI Ireland Ltd	Ireland [email protected]	Unstructured extraction of data from the source of information (i.e. documents) for further verification. Translation and transcription of video identification interview sessions.	KYC: Identity document verification; Address verification. Transaction Monitoring Video Identification	N/A
Servers.com SERVERS.com B.V.	The Netherlands [email protected]	Technical data (e.g. logs) hosting and verification results sending software	All Sumsub Services	N/A
Slack SFDC Ireland Limited	Ireland [email protected]	Sumsub internal communication platform (for resolving inquiries from counterparties and data subjects only)	All Sumsub Services	N/A
SMS API LINK Mobility Poland Sp. z o.o.	Poland [email protected]	SMS sending when Twilio is out of service	KYC: Phone verification	N/A
Twilio Twilio, Inc.	The US [email protected]	SMS sending (globally) and video interview software. Twilio Verify service.	KYC: Phone verification Video Identification	Adequate level of protection pursuant to article 45 of the EU GDPR:EU–US Data Privacy Framework
Crystal Blockchain Crystal Blockchain B.V.	The Netherlands [email protected]	Blockchain analytics tool for counterparties using crypto monitoring, KYT, travel rule and similar crypto-related services.	Transaction monitoring: crypto transactions Travel Rule solution	N/A
Resistant AI Resistant AI s.r.o	Czech Republic [email protected]	Fraud detection as part of Sumsub’s proof of address services	KYC: Identity document verification; Address verification; AllDocs.	N/A
AML Watcher AML Watcher.com LLC	The US [email protected]	Provider contributing to AML screening and KYT (transaction monitoring) services	KYC: AML screening	Appropriate safeguards pursuant to article 46 of the EU GDPR and the UK GDPR: the Standard Contractual Clauses
AUTHADA AUTHADA GmbH	Germany [email protected]	eID verification services for user onboarding in compliance with German AML regulatory framework	KYC: Non-doc Identity document verification Non-doc address verification	N/A
Neutrino JRX Systems Ltd	New Zealand [email protected]	Bank Identification Number (BIN) lookup services through application programming interface	Payment method check	N/A (data centers are located in the EU)
Lanck Express Teleservices Corp.	The US [email protected]	SMS sending for phone verification purposes	KYC: Phone verification	Appropriate safeguards pursuant to article 46 of the EU GDPR and the UK GDPR: the Standard Contractual Clauses
Prelude Ding Negoce SAS	France [email protected]	SMS sending for phone verification purposes	KYC: Phone verification	N/A
Kinegram OVD Kinegram AG	Switzerland [email protected]	Documents verification via a containerized solution fully hosted within our infrastructure	KYC: NFC verification	EU Adequacy decision for Switzerland. Brussels, 26 July 2000 Data storage in Germany
Fingerprint FingerprintJS, Inc.	The US [email protected]	Fingerprint is a tool to recognize and track website users, creating a “digital fingerprint” of each user’s device, supporting fraud prevention and detection services.	Device Intelligence	Appropriate safeguards pursuant to article 46 of the EU GDPR and the UK GDPR: the Standard Contractual Clauses
Microsoft Azure Microsoft Ireland Operations Limited	Ireland https://www.microsoft.com/de-de/privacy/privacy-support-requests	Microsoft Azure OpenAI Service used for unstructured extraction of data from the source of information (i.e. documents) for further verification. While data is stored in Sweden, model inference requests may be processed in any Azure region globally with available capacity.	KYC: Identity document verification; Address verification. Transaction monitoring. AllDocs.	N/A
Merkle Science Stackseer Technologies Ltd.	The UK [email protected]	Authentication, risk assessment, and other solutions related to Blockchain transactions and wallets, to enable tracking of provenance and risk monitoring for cryptocurrency transactions.	Transaction monitoring: crypto transactions	EU Adequacy Decision for the UK, Brussels, 28 June 2021
DeepL DeepL SE	Germany [email protected]	Machine translation services to support multilingual KYB verification.	KYB	N/A
TRM TRM Labs Inc.	The US [email protected]	Provider of blockchain analytics services for Sumsub’s Travel Rule solution.	Travel Rule solution	Appropriate safeguards pursuant to article 46 of the EU GDPR and the UK GDPR: the Standard Contractual Clauses
GTR Infozone Technologies PTE Ltd	Singapore [email protected]	Provider of Travel Rule compliance infrastructure enabling secure exchange of originator and beneficiary information between Virtual Asset Service Providers (VASPs) in accordance with FATF Travel Rule requirements.	Travel Rule solution: GTR challenge flow protocol	Appropriate safeguards pursuant to article 46 of the EU GDPR and the UK GDPR: the Standard Contractual Clauses
Enable Banking Enable Banking Oy	Finland [email protected]	Verifying user's personal and bank account data based on Account Initiation Service (AIS).	Bank account verification	N/A
eID Easy eID Easy OÜ	Estonia [email protected]	Verifying user's identity document based on the national eID scheme.	Non-Doc Identity verification	N/A
Volt Volt Technologies sp. z o.o.	Poland [email protected]	Verifying user's personal and bank account data based on Payment Initiation Service (PIS) and refund.	Penny Drop Verification	N/A
Signicat Signicat AS	Norway [email protected]	Verifying user's personal and residency data against official banking sources. eID methods for returning end-user authentication.	Non-Doc Identity Verification Video Identification	N/A
Reown Reown Inc.	USA [email protected]	Automated verification of unhosted wallets.	Travel Rule solution	Appropriate safeguards pursuant to article 46 of the EU GDPR and the UK GDPR: the Standard Contractual Clauses
Huawei Cloud Sparkoo Technologies Singapore Pte. Ltd.	Singapore [email protected]	Local data storage in Turkey (where so requested by the client).	All Sumsub Services	Appropriate safeguards pursuant to article 46 of the EU GDPR and the UK GDPR: the Standard Contractual Clauses
CODE Code Co., Ltd.	Republic of Korea [email protected]	Provider of Travel Rule compliance infrastructure enabling secure exchange of originator and beneficiary information between Virtual Asset Service Providers (VASPs) in accordance with FATF Travel Rule requirements. CODE is disclosed as a sub-contractor for DORA purposes only and is not a sub-processor under the GDPR.	Travel Rule solution: CODE protocol	N/A
Cifas Cifas	UK	Verifying user's personal and residency data against the CIFAS National Fraud Database.	KYC: Right to Rent / Right to Work verification	EU Adequacy Decision for the UK, Brussels, 28 June 2021
Palabra.ai Palabra.ai Ltd	UK	Language translation services for video identification operators.	Video Identification	EU Adequacy Decision for the UK, Brussels, 28 June 2021
Fireblocks Fireblocks UK INT’L Limited	The UK [email protected]	Provider of Travel Rule compliance infrastructure enabling secure exchange of originator and beneficiary information between Virtual Asset Service Providers (VASPs) in accordance with FATF Travel Rule requirements. Fireblocks is also used for the purpose of VASP attribution purposes.	Travel Rule solution: Fireblocks protocol	EU Adequacy Decision for the UK, Brussels, 28 June 2021
Sygna CoolBitX Ltd. Taiwan Branch	Taiwan [email protected]	Provider of Travel Rule compliance infrastructure enabling secure exchange of originator and beneficiary information between Virtual Asset Service Providers (VASPs) in accordance with FATF Travel Rule requirements. Sygna is disclosed as a sub-contractor for DORA purposes only and is not a sub-processor under the GDPR.	Travel Rule solution: Sygna Bridge protocol	N/A

For some Sub-processors facilitating certain Sumsub Services, typically Non-Document Identity Verification, Non-Document Address Verification, and Database Validation, we may only publish limited information due to contractual or legal restrictions or internal confidentiality policies. However, we provide transparency regarding such Sub-processors’ function and the general type of Sumsub Service(s) affected; other details (e.g., input and output personal data) are also available in the contract between the company you represent and the respective Sumsub entity.

Where you consider that you require additional information regarding any Sub-processor and the lack of such information may cause the company you represent or Sumsub to be in breach of any applicable data protection laws or regulations, please contact us at [email protected] via your dedicated data protection representative. Once a substantiated request is received, it will be duly considered.

Click here to expand

Product name	Provider’s Function	Provider’s Jurisdiction of incorporation	Purchasing Sumsub entity
Argentina DNI Verification (arg_gov_id)	Verifying user’s personal and residency data against an official government source.	Argentina	Raritex Trade Ltd
Argentina DNI Verification (arg_gov_dni)	Verifying user's personal, biometric, and residency data against official government sources.	Argentina	Raritex Trade Ltd
Brazil CPF Verification (bra_gov_cpf)	Verifying user's personal and biometric data against official government sources.	Brazil	Sum and Substance Ltd
Brazil CPF Verification (bra_gov_address_premium)	Verifying user's personal and residency data against official government sources.	Brazil	Raritex Trade Ltd
Brazil CPF Verification (bra_gov_cpf_basic)	Verifying user's personal data and identification number status against an official government source.	Brazil	Raritex Trade Ltd
Brazil CNH Verification (bra_gov_drivers)	Verifying user's personal data against an official government source based on the Driver's license record.	Brazil	Raritex Trade Ltd
USA SSN Verification (usa_gov_ssn)	Verifying user's personal and residency data against multiple reliable sources.	USA	Raritex Trade Ltd
Mexico Identity Verification (mex_gov_ine)	Validating user's Voter card status against an official government source.	Peru	Raritex Trade Ltd
Mexico CURP Verification (mex_gov_curp)	Verifying user's personal, residency data, and identification number status against an official government source via autofill.	Peru	Raritex Trade Ltd
Mexico CURP Verification (mex_gov_curp_ekyc)	Verifying user's personal, residency data, and identification number status against an official government source via manual input.	Peru	Raritex Trade Ltd
Peru DNI Verification (per_gov_dni)	Verifying user's personal and residency data against an official government source.	Peru	Raritex Trade Ltd
Peru DNI Verification (per_gov_tin)	Verifying user's personal, tax, and residency data, against an official government source.	Peru	Raritex Trade Ltd
USA Non Doc (usa_tel_phone)	Verifying user's personal and residency data against official credit sources.	USA	Raritex Trade Ltd
Mexico RFC Verification (mex_gov_rfc)	Validating user's tax identification number status against an official government source.	Mexico	Raritex Trade Ltd
Brazil CPF verification (bra_gov_riskcheck_bet)	Verifying user's permission to participate in betting activities against official government sources.	Brazil	Raritex Trade Ltd
USA SSN Verification (usa_gov_crd_ssn)	Verifying user's personal and residency data against multiple reliable sources.	USA	Raritex Trade Ltd
Nigeria BVN Verification (nga_gov_bvn)	Verifying user's personal, biometric, and residency data against an official government source based on their Bank verification number.	USA	Raritex Trade Ltd
Nigeria NIN Verification (nga_gov_nin)	Verifying user's personal, biometric, and residency data against an official government source based on their National identification number.	USA	Raritex Trade Ltd
Kenya Identity Verification (ken_gov_passport)	Verifying user's personal, residency data, and Passport status against an official government source.	Nigeria	Raritex Trade Ltd
Kenya Identity Verification (ken_gov_id_2)	Validating user's personal, residency data, and National ID card status against an official government source.	Nigeria	Raritex Trade Ltd
Nigeria BVN Verification (nga_gov_bvn_premium)	Verifying user's personal, biometric, and residency data against an official government source. Used in combination with Nigeria NIN Verification.	Nigeria	Raritex Trade Ltd
Nigeria NIN Verification (nga_gov_nin_doc)	Verifying user's personal, residency data, and NIN Slip status against an official government source.	Nigeria	Raritex Trade Ltd
Nigeria BVN Verification (nga_gov_bvn)	Verifying user's personal, biometric, and residency data against an official government source based on their Bank verification number.	Nigeria	Raritex Trade Ltd
Nigeria NIN Verification (nga_gov_nin)	Verifying user's personal, biometric, and residency data against an official government source based on their National identification number.	Nigeria	Raritex Trade Ltd
Nigeria NIN Verification Slip (nga_gov_nin_slip)	Verifying user's personal, biometric, residency data, and NIN Slip against an official government source.	Nigeria	Raritex Trade Ltd
Nigeria Identity Verification nga_gov_dl_docfree)	Verifying user's personal and biometric data against an official government source based on their Driver's license record.	Nigeria	Raritex Trade Ltd
Nigeria VIN Verification (nga_gov_voter)	Verifying user's personal data and Voter card status against an official government source.	Nigeria	Raritex Trade Ltd
Nigeria Identity Verification (nga_gov_dl)	Verifying user's personal data and Driver's license status against an official government source.	Nigeria	Raritex Trade Ltd
Palau Identity Verification (plw_cmm_id)	Validating user's identity document status against an official government source.	Palau	Raritex Trade Ltd
South Africa SAID Verification (zaf_gov_id)	Verifying user's personal data and National ID card status against an official government source.	South Africa	Raritex Trade Ltd
South Africa SAID Verification (zaf_gov_address)	Verifying user's personal, biometric, and National ID card data against an official government source.	South Africa	Raritex Trade Ltd
South Africa SAID Verification (zaf_gov_id_docfree)	Verifying user's personal, biometric, and National ID card data against an official government source.	South Africa	Raritex Trade Ltd
UAE Identity Verification (are_gov_id_2)	Validating user's identity document status against an official government source.	India	Raritex Trade Ltd
Indonesia NIK Verification (idn_gov_nik)	Verifying user's personal, biometric, and residency data against an official government source.	Indonesia	Raritex Trade Ltd
Australia DVS Verification (aus_gov_dvs)	Validating user's foreign Passport data against an official government source.	Australia	Raritex Trade Ltd
Australia DVS Verification (aus_gov_dvs_visa)	Validating user's foreign Passport data against an official government source.	Australia	Raritex Trade Ltd
Uzbekistan Identity Verification (uzb_gov_id)	Verifying user's personal and biometric data against an official government source based on their identity document record.	Uzbekistan	Raritex Trade Ltd
Uzbekistan PINFL Verification (uzb_gov_pinfl)	Verifying user's personal and biometric data against an official government source based on their Personal identification number.	Uzbekistan	Raritex Trade Ltd
International TIN Verification (intl_prp_tin)	Validating user's tax identification number format and syntax based on the national specifications.	Portugal	Raritex Trade Ltd
UK Identity Verification (gbr_crd_bank)	Verifying user's personal and residency data against official banking sources.	UK	Raritex Trade Ltd
UK Residency Verification (gbr_prp_residency_1x1 and gbr_prp_residency_2x2)	Verifying user's residency data via 2x2/1x1 Matching against multiple reliable sources.	UK	Raritex Trade Ltd
Global Identity Verification (intl_prp_person_1x1 and intl_prp_person_2x2)	Verifying user’s personal data against a variety of recognized databases until it matches with one of the sources in their country.	UK	Raritex Trade Ltd
Global Address Verification (intl_prp_residency_1x1 and intl_prp_residency_2x2)	Verifying user’s personal and residency data against a number of recognized databases until it matches with one of the sources in their country.	UK	Raritex Trade Ltd
Nigeria NIN Verification (nga_gov_nin_doc)	Verifying user's personal, residency data, and NIN Slip status against an official government source.	Nigeria	Raritex Trade Ltd
Nigeria NIN Verification (nga_gov_nin)	Verifying user's personal, biometric, and residency data against an official government source based on their National identification number.	Nigeria	Raritex Trade Ltd
Nigeria BVN Verification (nga_gov_bvn_premium)	Verifying user's personal, biometric, and residency data against an official government source. Used in combination with Nigeria NIN Verification.	Nigeria	Raritex Trade Ltd
Nigeria BVN Verification (nga_gov_bvn)	Verifying user's personal, biometric, and residency data against an official government source based on their Bank verification number.	Nigeria	Raritex Trade Ltd
South Africa SAID Archive Verification (zaf_gov_id_cache)	Verifying user's personal, biometric, and National ID card data against an official government source.	South Africa	Raritex Trade Ltd
Brazil CPF verification (bra_crd_id)	Verifying user's personal, biometric, and National ID card data against a credit source.	Brazil	Sumsub Brasil LTDA
Colombia Non-Doc Identity Verification (col_gov_runt_ani)	Verifying user's personal, biometric, and identity document data against an official government source based on the Driver's license record.	Brazil	Sumsub Brasil LTDA
Norway BankID Verification (nor_bankid_nbid_bid)	Verifying user's personal data against official banking sources.	Estonia	Raritex Trade Ltd
Netherlands iDIN Verification (nld_crd_idin)	Verifying user's personal and residency data against official banking sources.	Estonia	Raritex Trade Ltd
Denmark MitID Verification (dnk_bankid_mitid)	Verifying user's personal and residency data against official banking sources.	Estonia	Raritex Trade Ltd
Nigeria Phone Non-Doc Identity Verification (nga_gov_nin_phone)	Verifying user's personal and residency data against official banking sources.	Nigeria	Sum and Substance Ltd.
Canada Identity Verification (can_crd_idv)	Verifying user's personal and residency data against an official credit source.	Canada	Raritex Trade Ltd
India Aadhaar Verification via DigiLocker (ind_gov_aadhaar_digi)	Verifying user's personal, biometric, and residency data against an official government source.	India	Raritex Trade Ltd
Kenya Identity Verification (ken_gov_passport)	Verifying user's personal, residency data, and Passport status against an official government source.	Kenya	Raritex Trade Ltd
Kenya Identity Verification (ken_gov_id_2)	Validating user's personal, residency data, and National ID card status against an official government source.	Kenya	Raritex Trade Ltd
Kenya Identity Verification (ken_gov_id_docfree)	Verifying user's personal, biometric, and residency data against an official government source based on their National ID card record.	Kenya	Raritex Trade Ltd
Kenya Identity Verification (ken_gov_passport_docfree)	Verifying user's personal, biometric, and residency data against an official government source based on their Passport record.	Kenya	Raritex Trade Ltd
Thailand DOPA Verification (tha_gov_id_dopa)	Validating user's identity document data against an official government source.	Thailand	Raritex Trade Ltd
Brazil CPF Verification (bra_crd_id)	Verifying user's personal, biometric, and National ID card data against a credit source.	Brazil	Sumsub Brasil LTDA

Updates

We are committed to transparency regarding how your data is processed. We are preparing to add the following partners to our list of authorized subprocessors.

In accordance with the terms of your DPA, you may object to these additions if you have reasonable concerns over the use of certain subprocessors.

Category	Function	Jurisdiction of incorporation	Purchasing Sumsub entity
Kenya Identity Verification (ken_gov_passport)	Verifying user's personal, residency data, and Passport status against an official government source.	Kenya	Raritex Trade Ltd
Kenya Identity Verification (ken_gov_id_2)	Validating user's personal, residency data, and National ID card status against an official government source.	Kenya	Raritex Trade Ltd
Kenya Identity Verification (ken_gov_id_docfree)	Verifying user's personal, biometric, and residency data against an official government source based on their National ID card record.	Kenya	Raritex Trade Ltd
Kenya Identity Verification (ken_gov_passport_docfree)	Verifying user's personal, biometric, and residency data against an official government source based on their Passport record.	Kenya	Raritex Trade Ltd
Thailand DOPA Verification (tha_gov_id_dopa)	Validating user's identity document data against an official government source.	Thailand	Raritex Trade Ltd
Brazil CPF Verification (bra_crd_id)	Verifying user's personal, biometric, and National ID card data against a credit source.	Brazil	Sumsub Brasil LTDA

Companies using the Sumsub Service(s) affected by the introduction of a new Sub-processor may object in writing to the processing of their personal data by that Sub-processor within thirty (30) calendar days following the respective update of this webpage, by specifying the reason(s) for objection and sending the objection to: [email protected]. Otherwise, the new Sub-processor(s) shall be deemed accepted.

Where Sumsub receives an objection as described above and (if applicable) in the contract between the objecting company and the respective Sumsub entity, it shall have the right to cure the objection through one of the following options (to be selected at Sumsub’s sole discretion):

(a) where feasible, Sumsub may use an alternative Sub-processor previously approved by the objecting company to continue the provision of the affected Sumsub Service(s); or
(b) Sumsub may cease to provide the particular aspect of the affected Sumsub Service(s) (or the Sumsub Service in its entirety where that aspect is crucial to its correct operation) that would involve the use of the Sub-processor concerned by the objection to processing personal data.