When we operate infrastructure for you, the cloud provider is chosen with you for each engagement, based on your needs and existing agreements. We work with the providers below. Only the one used in a given engagement processes your data, and it is named in that engagement’s data processing agreement.

Where the cloud account is yours, the provider is your own processor under your agreement with them, not our sub-processor. We give notice before adding a sub-processor, and none outside the EU/EEA is engaged without Standard Contractual Clauses and a transfer impact assessment. Services we use for our own business, such as email, are described in the privacy notice.

← Back to the capability statement