Legal review required before launch.
Contracting entities, processing locations, transfer mechanisms and the production hosting provider remain marked [LEGAL REVIEW] until verified against signed supplier terms and the deployed environment.
Current providers and integrations
| Provider or service | Purpose | Data involved | Role and location |
|---|---|---|---|
| Stripe | Subscription checkout, payment administration and billing portal. | Customer and workspace identifiers, plan, email, payment status and Stripe billing identifiers. Stripe receives payment-card data directly. | Sub-processor for billing operations. [LEGAL REVIEW] Confirm contracted Stripe entity, processing locations and transfer safeguard. |
| OpenAI | Optional deadline explanations, summaries and drafting features initiated by an Authorised User. | Feature prompt and the selected compliance, task, audit or client-request context required to produce the response. | Sub-processor when an AI feature is used. [LEGAL REVIEW] Confirm contracted entity, regions, retention/training settings and transfer safeguard. |
| AWS SES | Transactional email, invitations, reminders, digests and service notifications. | Recipient and sender addresses, subject, message content and delivery metadata. | Sub-processor. [LEGAL REVIEW] Confirm AWS contracting entity, SES region, processing locations and transfer safeguard. |
| AWS S3 | Private encrypted storage for evidence and client-uploaded documents. | File contents, filenames, content types, object keys and storage metadata. | Sub-processor. [LEGAL REVIEW] Confirm AWS contracting entity, bucket region, backup/version locations and transfer safeguard. |
| Honeybadger | Application error monitoring, release diagnostics and operational alerting. | Error and job diagnostics plus limited technical identifiers needed to investigate failures; secrets and personal data must be filtered. | Sub-processor. [LEGAL REVIEW] Confirm contracted entity, processing locations, retention and transfer safeguard. |
| Companies House | Search and retrieval of public UK company information requested by an Authorised User. | Search terms, company number and public company records returned by the API. | Independent public authority/data source rather than a ComplyClock sub-processor. [LEGAL REVIEW] Confirm this classification and disclosure. |
| [LEGAL REVIEW] Production hosting provider | Application, database, queue, cache and network hosting. | All Customer Data and technical data processed by the deployed Service as necessary to provide hosting. | Identify the underlying provider, contracted entity, service locations, backup locations and transfer safeguard before launch. |
Changes to this list
We will update the stable “Last updated” date when this list changes. [LEGAL REVIEW] Approve the advance notice period, notification method, Customer objection process and remedy where a reasonable objection cannot be resolved.
Questions about a provider can be sent to hello@complyclock.uk. Contractual processing terms are set out in the Data Processing Addendum.