Sub-processors

The trusted third parties we use to help run Posttime, each bound by contract to protect your data and use it only on our instructions.

Core providers

These are always part of the service.

ProviderPurposeLocationTransfer safeguard
European cloud infrastructure providerApplication & database hosting and storageEEA (Germany)UK adequacy (EEA)
StripeCard payments & subscription billing (card details held by Stripe, not by us)USA / EEASCCs + UK IDTA Addendum
PayPalAlternative payment processingUSA / EEASCCs + UK IDTA Addendum
ResendTransactional & service email deliveryUSASCCs + UK IDTA Addendum
CloudflareCompanies House search proxy (edge relay for company lookups)Global edge networkSCCs + UK IDTA Addendum

Optional providers

These process data only where you turn the relevant feature on.

ProviderPurposeLocationTransfer safeguard
Anthropic (Claude)AI features — such as report generation and email-reply drafting — process only the text you submit for the task; not used to train modelsUSASCCs + UK IDTA Addendum
GoogleWhere you connect a Google mailbox, or sign in with GoogleUK / EEA / USAAdequacy / SCCs
MicrosoftWhere you connect a Microsoft 365 mailbox, or sign in with MicrosoftUK / EEA / USAAdequacy / SCCs
QuickBooks Online (Intuit)Where you connect it, to push invoices you createUK / EEA / USAAdequacy / SCCs

Not sub-processors

When you use certain features, data is sent to the following on your instruction. They act as independent controllers or public sources, not as our sub-processors:

  • HM Revenue & Customs — Making Tax Digital VAT and Income Tax filing.
  • Companies House — public register lookups (the data returned is public).

Questions

For questions about our sub-processors, or to be notified of changes, contact privacy@posttime.uk.