Sub-processors

Last updated: {{EFFECTIVE_DATE}}

To deliver the Estate Ops Service we use the third-party providers below. Each acts as our sub-processor under our Data Processing Agreement. We have, or are putting in place, a data processing agreement with each, and rely on a valid transfer mechanism where data leaves the UK.

We will update this page before adding or replacing a sub-processor so customers can review the change.

Current sub-processors

ProviderFunctionPersonal data processedLocation
SupabaseDatabase, authentication and file/object storage hostingAll Customer Data, account data, credentials, photos{{REGION_SUPABASE}}
VercelHosting of the web portalTechnical/usage data, IP addresses, content served to signed-in users{{REGION_VERCEL}}
ResendTransactional email delivery (invitations, account emails)Recipient name and email address, message content{{REGION_RESEND}} (US)
TwilioSMS delivery for SOS dispatchRecipient phone number, sender name, location/coordinates, message content{{REGION_TWILIO}} (US)
Google (Firebase Cloud Messaging)Push-notification delivery to mobile devicesDevice push token, notification content and metadata{{REGION_FIREBASE}} (US)
SentryError and performance diagnosticsError/diagnostic data, IP address (Session Replay/screen recording is disabled){{REGION_SENTRY}} (US/EU)

Map imagery

The web portal and app display map tiles from OpenStreetMap. Map-tile requests include technical request data (such as IP address) handled by the tile provider as an independent controller; no Customer Data is shared with the tile provider.

Transfers outside the UK

Where a sub-processor processes personal data outside the UK, we rely on the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, with supplementary measures as needed. We prefer UK or EEA hosting where the provider offers it.

Questions

To ask about our sub-processors or raise an objection to a change, contact {{PRIVACY_EMAIL}}.