Last updated 28 July 2026
To deliver the service we use a small number of trusted sub-processors. Each is bound by data protection obligations no less protective than our data processing terms. This page lists the sub-processors that may process personal data on your behalf.
| Provider | Purpose | Location |
|---|---|---|
| Microsoft Azure | Cloud hosting and data storage | UK / EU (region of your choice) |
| Microsoft Graph / Exchange Online | Directory sync, mail-flow provisioning and transactional email delivery | Your Microsoft 365 tenant region |
| Stripe | Payment processing and card vaulting | UK / EU / US |
| Cloudflare | DNS and network security for service endpoints | Global edge |
| Product analytics provider | Aggregate, privacy-respecting usage analytics | UK / EU |
We will update this page when we add or replace a sub-processor, and give notice as described in our data processing terms so you may object on reasonable grounds. To be notified of changes, email [email protected].