Service Providers

Certain search types use selected service providers to complete user-requested lookups, enrichment, validation, geolocation, and related technical processing.

Updated
03.09.2026
Reference
Privacy and Terms pages link here for current provider details.
Compliance Note
The providers listed on this page are selected providers we currently work with that publicly describe GDPR-related compliance, support, safeguards, or comparable privacy commitments. We maintain a Data Processing Agreement (DPA) with each provider listed on this page, covering how shared data is handled on our behalf.
Some searches use a hybrid model: local processing on our systems plus selected service-provider-assisted lookup.
We limit provider-side transmission to the query fields reasonably necessary to complete the user-requested search, validation, enrichment, or geolocation flow.
Raw provider responses, including restricted identity and image-geolocation output, cannot be saved into Workspace; only permitted, user-curated Workspace content follows the Workspace retention lifecycle.
The providers listed on this page are providers we currently work with that publicly describe GDPR-related compliance, support, safeguards, or comparable privacy commitments, but users should still review each provider's own current privacy and legal documentation.
Provider availability, geography, and product scope can change over time; we may add, replace, or remove providers as the service evolves.

Current Service Provider Categories

We aim to use only the query fields reasonably necessary for the requested feature and to work with providers that represent privacy, security, contractual safeguards, and GDPR-related commitments appropriate to their services. This page is informational and may change as providers, features, or routes evolve.

OpenSanctions

OpenSanctions

AML sanctions, PEP, watchlist & wallet screening

Search Types
AML Person Screening, AML Company Screening, AML Wallet Screening
Data That May Be Shared
The subject name or company details and limited disambiguation fields (such as country, date of birth, or registration number) for person or company screening, or the wallet address and blockchain for wallet screening.
Purpose
Used to return candidate sanctions, PEP, watchlist, and public-scrutiny results for people and companies, plus candidate listed-wallet and financial-crime intelligence for crypto wallets.
Handling
OpenSanctions does not retain the submitted query on its own systems and does not use it to train or improve its models.
Dilisense

Dilisense

AML sanctions, PEP, RCA, watchlist & adverse media

Search Types
AML Person Screening, AML Company Screening, AML Adverse Media
Data That May Be Shared
The subject name or company details submitted for the requested AML screening or Adverse Media search.
Purpose
Used to return candidate sanctions, PEP, RCA, wanted-person, financial-crime, regulatory, and watchlist matches for people and companies. Adverse Media is offered as its own search type and returns related news-article results.
Handling
Dilisense does not retain the submitted query on its own systems and does not use it to train or improve its models.
Didit

Didit

AML sanctions, PEP, KYT wallet screening & adverse media

Search Types
AML Person Screening, AML Company Screening, AML Wallet Screening, Adverse Media
Data That May Be Shared
The subject name or company details for person and company screening, or the wallet address and blockchain for wallet screening, plus the Adverse Media flag when that option is enabled on a supported search.
Purpose
Used to return candidate sanctions, PEP-level, and crime-category risk results for people and companies; candidate listed-wallet, KYT, and financial-crime intelligence for crypto wallets; and optional candidate adverse-media results.
Handling
Didit retains the submitted query on its own systems for up to one month and does not use it to train or improve its models.
Have I Been Pwned

Have I Been Pwned

Email breach lookup

Search Types
Email Search
Data That May Be Shared
The email address submitted for the user-requested Email Search.
Purpose
Used to return known breach records associated with that email address.
GeoInfer logo

GeoInfer

AI visual geolocation

Search Types
AI Image Geolocation
Data That May Be Shared
Only the uploaded image file necessary for a user-initiated AI Image Geolocation search. Image URLs, account email addresses, and our internal SHA-256 file hash are not sent to GeoInfer.
Purpose
Used for scene/place context, approximate geographic candidates, and photo/scene verification. Results are informative and probabilistic only; it is not used for people location, face recognition, biometric, or identity resolution.
Oceanir

Oceanir

AI scene and place verification

Search Types
AI Image Geolocation
Data That May Be Shared
The selected JPEG or PNG image bytes are sent only for the requested interactive analysis. Image URLs are not sent to Oceanir.
Purpose
Used for scene/place context, bounded visual evidence, and photo/scene verification. Results are informative and probabilistic only; it is not used for people location, face recognition, biometric, or identity resolution.
Alchemy

Alchemy

Blockchain infrastructure

Search Types
Wallet Intelligence
Data That May Be Shared
The wallet address and selected blockchain network submitted for the requested Wallet Intelligence search.
Purpose
Used to return balances, tokens, NFTs, transfer history, and token approval risk for a wallet address across supported EVM networks and Solana.
The Graph

The Graph

Blockchain protocol intelligence

Search Types
Wallet Intelligence / Protocol Intelligence
Data That May Be Shared
The wallet address and selected blockchain network are supplied as GraphQL variables only to reviewed, pinned Subgraph deployments required for the requested Protocol Intelligence lookup.
Purpose
Used to add protocol context such as DEX swaps, liquidity, lending, bridges, governance, ENS, NFT marketplace, and available privacy-protocol interactions. Protocol detection is not an AML, sanctions, or entity-attribution verdict.
Handling
Only registry-reviewed, deployment-pinned sources are queried. Query bodies, variables, wallet addresses, raw upstream errors, and API keys are not retained in provider usage telemetry.