Skip to main content
Legal

Sub-processors

The third parties that may process customer data, and what each is used for.

Last updated 21 August 2026

What counts as evidenceThree rows. A control described in a document is unticked; a control enforced by code and one refused by the database are ticked. Only the second and third are evidence that something holds.Described in a documentEnforced by codeRefused by the database

Before you rely on this

This document is a drafting framework prepared for a platform that is not yet trading. It has not been reviewed by qualified counsel in any jurisdiction, and it must be before it is relied upon by anybody.

This list must reflect the operator’s actual infrastructure. Publishing an inaccurate list is worse than publishing none, because customers rely on it for their own compliance.

1. Current sub-processors

The table below must be completed from the operator’s real infrastructure before this page is published. Each row needs the legal entity, the purpose, and the region the processing takes place in.

SUB-PROCESSOR NAMEPURPOSE — processed in REGION, under DPA REFERENCE.

2. Changes

We will give NOTICE PERIOD notice before adding a sub-processor that processes personal data, so that customers have the opportunity to object.

Before this page is published

The highlighted terms above are facts about a specific legal entity that this draft does not know. Each must be supplied, and the whole document reviewed by qualified counsel, before anybody relies on it.

  • THE ACTUAL LIST of infrastructure providers, with entity name, purpose and processing region
  • NOTICE PERIOD before a new sub-processor is added, and how customers are told
  • DATA PROCESSING AGREEMENT reference for each