Trust
Subprocessors
Parts of the service are carried by other firms. This page states the categories, what each is used for, and how you learn when the list changes. The named companies and their locations are given in the current annex, issued to clients with the data processing terms.
Last revised 18 August 2026
Categories in use
- Platform hosting
- Runs the application and holds the database, uploaded documents and photographs.
- Identity and sign-in
- Verifies who is signing in, including a client's own Microsoft identity where one is used.
- Notification delivery
- Carries push notifications and service email to a device or an inbox.
- Document reading
- Reads text out of manuals and certificates so they can be searched. Used on uploaded paperwork, not on correspondence.
- Contractors and suppliers
- Firms engaged to carry out work at a residence. They receive only what the job requires.
- Accounting and invoicing
- Produces and files the invoices for subscription, additional hours and pass-through cost.
Getting the named list
The annex naming each company, the country it operates from and the transfer safeguard relied on is maintained as a dated document and issued to clients on request. It is kept out of this page deliberately: a published list drifts out of date, and an out-of-date list is worse than none.
Changes and objection
Clients are told at least thirty days before a new subprocessor begins handling their data. A client who reasonably objects on data protection grounds may raise it within that period; where the objection cannot be resolved, the client may terminate the affected part of the service without penalty.
What each one is held to
Every processor is engaged under written terms no weaker than ours: processing only on instruction, confidentiality, appropriate security, assistance with data subject requests, and deletion or return of the data when the engagement ends.