Skip to main content
Draft pending counsel review. Not legal advice. Do not rely on as a final register until this banner is removed.
This page lists the third parties (“subprocessors”) that process personal information on behalf of IVERIFI, LLC d/b/a SpitShake. Together with our Data Processing Addendum, this page forms the Annex III subprocessor list required by GDPR Article 28(2).

Change notice

We will give Tenants at least 30 days’ advance notice before adding a new subprocessor or changing an existing one’s scope. Notices will be posted on this page. If you are an enterprise Tenant and object to a new subprocessor on reasonable grounds, contact dpo@spitshake.io — we will work with you in good faith to find an alternative or, failing that, give you a pro-rata refund for the affected period.

Current subprocessors

Corporate family

IVERIFI, LLC is wholly owned by ADS CORP, our ultimate parent company. Limited data may be shared with ADS CORP for corporate governance, finance, and internal audit purposes under the corporate-family exemption to standard third-party sharing restrictions. ADS CORP is not a subprocessor in the GDPR Article 28 sense — it is an upstream affiliate disclosed here for transparency.

How to stay updated

  • Tenants: notices of subprocessor changes are posted here at least 30 days in advance. We recommend bookmarking this page and reviewing it quarterly. Email notification for enterprise tenants can be arranged through your account contact.
  • Signers: if the tenant you signed with has questions about subprocessors, they should follow the tenant-facing notice process above.

Questions

Contact dpo@spitshake.io.
Service provided by IVERIFI, LLC d/b/a SpitShake (a Connecticut limited liability company wholly owned by ADS CORP). Last updated: 2026-04-19.