Sub-processors

A sub-processor is a third party that AI92 engages to process personal data in the course of providing our services. This page is the sub-processor register referenced by our Data Processing Addendum.

AI92 engages a limited set of vetted sub-processors. Each is engaged under a written agreement imposing data-protection obligations no less protective than those we commit to, and each processes personal data only to provide its specific service.

Our sub-processors fall into the following categories:

• Cloud infrastructure & hosting
• Content delivery, security & DNS
• Payment processing
• Email & messaging
• Review invitations & customer feedback
• Product, developer & mobile tooling
• Analytics & monitoring
• Market & SEO data providers (engaged only when you use the SEO, market-analysis and contact-discovery features)

The specific, current list of named sub-processors — together with the purpose and personal data involved for each — is provided to customers on request under our Data Processing Addendum. Email [email protected] to request it.

Where personal data is transferred outside the UK or European Economic Area, we rely on an appropriate transfer mechanism — an adequacy decision where one exists, or the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, together with supplementary measures such as encryption in transit and at rest.

We keep this register up to date. In line with our Data Processing Addendum, we give customers at least 30 days’ notice before a new or replacement sub-processor begins processing customer personal data. A customer may object within fifteen (15) days of that notice on reasonable data-protection grounds; if the objection cannot be resolved, the customer may terminate the affected Services and receive a pro-rata refund of any pre-paid fees for the terminated portion.

To be notified of changes, email [email protected] with the subject “Sub-processor updates”.

Questions about our sub-processors or data-processing practices: [email protected].

Security or vulnerability reports: [email protected] (see our Security page).