Sub-processors
The third parties that process customer personal data on our behalf, what each one does, where it is located and the transfer mechanism that applies.
1. Current sub-processors
| Sub-processor | Purpose | Data involved | Location | Transfer mechanism |
|---|---|---|---|---|
| Supabase (managed Postgres, authentication and object storage) | Hosting of the application database, user authentication and stored evidence files | All customer data held in the platform, including account, fleet, compliance and evidence records | European Union (Ireland) | No transfer outside the UK/EEA for data at rest; UK adequacy applies to EEA hosting |
| Amazon Web Services, Inc. | Underlying infrastructure on which the managed database and storage run | All customer data held in the platform (as infrastructure provider) | European Union (Ireland) | UK adequacy for EEA hosting; support access governed by the provider's standard contractual clauses |
| Cloudflare, Inc. | Content delivery, edge application runtime, TLS termination and denial-of-service protection | Request metadata, IP addresses, and application traffic in transit | Global edge network with UK/EU points of presence | UK International Data Transfer Addendum to the EU Standard Contractual Clauses |
| Transactional email provider (to be confirmed at launch) | Delivery of service, security and compliance reminder email | Recipient name and email address, subject line and message content | To be confirmed | To be confirmed before production email is enabled |
2. How sub-processors are governed
- Each is engaged under a written contract imposing data protection obligations equivalent to those we owe our customers.
- Each is assessed before engagement for security posture, location, transfer mechanism and sub-processing chain.
- We remain fully liable to the operator for the performance of every sub-processor.
- We give at least 30 days' notice before adding or replacing one, and operators may object on reasonable data-protection grounds.
3. Being notified of changes
To be told when this schedule changes, contact privacy@fleetverified.co.uk and ask to be added to the sub-processor notification list. This page always shows the current position.