This list was last updated 29th May 2018. In order to obtain the best combination of service, capability and security, we will update our third-party processors from time to time. An updated list will be posted here.
Major changes will be preceded by our own data protection impact assessment.
|Sub-Processor Name||Data Subjects||Processing Purpose||Data to be Processed||Storage Location|
|Autotask||Staff of our clients||Administering sales and support processes||Contact details, responsibilities, correspondence||UK|
|IT Glue||Staff of our clients||Administering support processes||Contact details, responsibilities||Germany|
|Microsoft (Office 365 & Dynamics)||Staff and customers of our clients; prospects||Email, SharePoint development, prospecting, Nexus document storage for performance of a contract||Contact details, correspondence, potentially our clients' customer data||UK/EU|
|Finance Software (Current)||Staff of our clients||Financial record-keeping, payments||Contact details||On premises (UK)|
|Finance Software (Planned)||Staff of our clients||Financial record-keeping, payments||Contact details||US data centres with EC model contract clauses.|
|GoCardless (Direct Debit) N.B. as Joint Data Controllers||Name/contact details for direct debit account||Processing payments, security||Contact, bank and financial information. Sub-processed as necessary for payments.||London-based but international network|
|Communigator||Staff of our clients||Email marketing and website engagement tracking||Contact details, web activity tracking||UK data centre|
|Google Analytics||Website visitors||Website engagement tracking||IP address, activity||International but under EU-US privacy shield|
N.B. Some will be joint controllers
|Staff of our clients||Provision of goods or services||Typically contact information. Depends upon the service||Varies. See ‘International Transfers’ in our privacy notice.|
|Contractor Engineers||Staff and customers of our clients||Administering support processes||Contact details, correspondence, potentially the controller’s customer data||EU|