Sub-processors
Last updated: November 2026
These are the suppliers that process personal data on our behalf. Each one works under a written contract with data protection terms. Customer care records are hosted in the UK. Where a supplier can process data outside the UK, we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum.
| Supplier | What they do | Data | Where |
|---|---|---|---|
| IONOS | Application server and database hosting | All platform data, including customer care records | United Kingdom |
| Amazon Web Services | File storage and encrypted database backups | Uploaded files, evidence and backups | United Kingdom (London, eu-west-2) |
| Microsoft Azure OpenAI | AI drafting features (only when a user runs one) | The content that feature needs | United Kingdom (UK South) |
| Microsoft 365 | Our business email and support correspondence | Emails you send us and our replies | United Kingdom / EU |
| Brevo | Service and marketing email delivery | Name, email address, email content | European Union |
| Stripe | Card payments and subscriptions | Billing contact and payment details | UK / EU, may process in the United States |
| Google (Analytics and Ads) | Website measurement and advertising, only with cookie consent | Website usage data; no platform records | May process in the United States |
Changes
We update this page before a new sub-processor starts handling customer records, and tell account owners by email at least 30 days ahead so they can object. To ask a question or object, email Contact us via email.
See also our Privacy Notice, Data Processing Terms and Security page.