Skip to main content
Busy shoppers in London business district on a semi sunny day

General Data Protection Regulation (GDPR)

Verifone's subprocessors and data center locations.

Last updated: May 19, 2021

This page provides information on the Verifone Cloud Services (VCS) infrastructure environment and the entities utilized by Verifone to support the provision of payment gateway services to customers located in the European Economic Area (EEA).  If you have questions, please contact your Verifone Sales Representative or Verifone's Data Protection Officer at privacy@verifone.com.

Verifone Affiliates

The following Verifone affiliate companies (acting as subprocessors) have secure, remote access to the VCS environment to perform the listed activities and may have access to certain Personal Data contained in issue tracking systems and log files

Entity Name Entity Type Location Description of Activities Date Added Date Removed Appropriate Safeguards
Verifone (HAPI) Philippines Inc. Verifone Affiliate Philippines 24/7 monitoring and security of infrastructure and applications; incident identification and escalation. Oct 17, 2019 Active Standard Contractual Clauses1
VeriFone India Technology Private Limited Verifone Affiliate India Hardware configuration; database updates and configuration; certificate management; event management services. Oct 17, 2019 Active Standard Contractual Clauses1
Verifone S.A. Verifone Affiliate Uruguay Hardware configuration; database updates and configuration; certificate management; event management services. Mar 17, 2021 Active EU Adequacy Decision2
Verifone New Zealand Verifone Affiliate New Zealand Hardware configuration; database updates and configuration; certificate management; event management services. Mar 17, 2021 Active EU Adequacy Decision2

Third-Party Sub-processors

The following is a list of third-party sub-processors that process data on behalf of Verifone or our customers in provision of payment gateway services. Please contact your Verifone Sales Representative for additional information on the service agreement.

Entity Name Entity Type Location Description of Activities Date Added Date Removed Appropriate Safeguards
Cardinal Commerce Third Party Service Provider United States Supplemental service to implement 3D-Secure for eCommerce customers; additional information provided in the applicable service agreement Oct 17, 2019 Active Standard Contractual Clauses1
Ypiresia 800 – Teleperformance A.E (“Teleperformance”) Third Party Service Provider Greece | Poland Technical support for customers, including troubleshooting related to Verifone hardware, services and software, configuration assistance, and terminal swaps. May 19, 2021 Active N/A – EEA Member

1Standard Contractual Clauses” means the standard contractual clauses, as agreed by the European Commission, for the transfer of Personal Information to processors established in third countries which do not ensure an adequate level of protection as set out in Commission Decision C(2010) 593, as updated, amended replaced or superseded from time to time by the European Commission.

2The European Commission has the power to determine, on the basis of article 45 of Regulation (EU) 2016/679 whether a country outside the EU offers an adequate level of data protection.  Additional information is available at  https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en

Data center Locations

Verifone owns and controls access to the VCS infrastructure that is used to process and store data related to Verifone's payment gateway services. Verifone VCS data centers are located in the following countries:

  • France
  • United Kingdom