Last updated 26 August 2026
To deliver the service we use a small number of trusted sub-processors. Each is bound by data protection obligations no less protective than our data processing terms. This page lists the sub-processors that may process personal data on your behalf.
A supplier appears here only if personal data belonging to you or your users can reach it. Tools we use to build and run the product that hold no such data, such as our source code repository, are not sub-processors and are not listed.
| Provider | Purpose | Location |
|---|---|---|
| LCN (Team Blue) | Server hosting and data storage | United Kingdom |
| Microsoft Graph / Exchange Online | Directory sync, mail-flow provisioning and transactional email delivery | Your Microsoft 365 tenant region |
| Microsoft 365 | Our own business email and file storage, which is where correspondence with you is held | United Kingdom |
| Stripe | Payment processing and card vaulting | UK / EU / US |
| Cloudflare | DNS and network security for service endpoints | Global edge |
| NinjaOne | Server monitoring, patch management and remote administration | UK / EU |
| SentinelOne | Endpoint threat detection and response on our servers | UK / EU |
We will update this page when we add or replace a sub-processor, and give notice as described in our data processing terms so you may object on reasonable grounds. To be notified of changes, email [email protected].