1. Current sub-processors
| Provider | Purpose | Location |
|---|
| WorkOS | Authentication / identity (sign-in) | USA |
| Anthropic | AI features (Ask-AI question answering & summaries) | USA |
| Stripe | Payment processing & subscriptions | USA / Ireland |
| Resend | Transactional & alert emails | USA |
| Hetzner | Hosting & database (servers) | Germany (EU) |
| Umami | Privacy-friendly, cookieless web analytics (self-hosted) | Germany (EU) — self-hosted |
Provider names link to each company’s data-processing or privacy terms where published. Note that Stripe also acts as an independent controller for some purposes (such as fraud prevention and its own regulatory obligations), not only as our processor.
2. Third-party content
A few pages load content directly from third parties. These are not sub-processors acting on our behalf — but because your browser fetches their content, they receive the standard technical information any web request carries (your IP address and browser details). They set no cookies.
| Provider | Purpose | Location |
|---|
| Google Fonts | Serves the site’s web fonts | USA |
| CARTO / OpenStreetMap | Serves map tiles on pages with a map | EU / global CDN |
3. International transfers
Where a provider processes data outside the UK, the transfer is protected by the UK’s adequacy regulations (including the UK–US Data Bridge where applicable) or by standard contractual clauses with appropriate safeguards. See our Privacy Policy for the full picture of how we handle personal data.
4. Changes to this list
We will update this page before adding or replacing any sub-processor that handles personal data. If you have questions about a provider on this list, contact [email protected].