Legal
Sub-processors
We use a small number of trusted providers ("sub-processors") to run v6o analytics. Each is bound by a data-processing agreement imposing security and confidentiality terms equivalent to our own. This is the current list, referenced by our Privacy Notice and our customer Data Processing Agreement.
| Sub-processor | Purpose | Location | Safeguard |
|---|---|---|---|
| Anthropic | AI analysis (Claude API + secure code-execution sandbox) | US | UK extension to the EU–US Data Privacy Framework / SCCs, plus Anthropic's DPA (contracting entity: Anthropic Ireland, Limited). No training on your data; files we upload for analysis are deleted after each job; analysis-container data retained up to 30 days |
| Google Cloud | Hosting, database, file storage | UK (London — europe-west2) | DPA; UK data-at-rest |
| Firebase Authentication | Sign-in and authentication | UK (London — europe-west2) | Google Cloud DPA — UK region, no US transfer |
| Sentry | Error monitoring (personal data minimised/scrubbed) | US | DPA / SCCs |
| Stripe | Payments | US/UK | DPA / SCCs |
We will give at least 30 days' notice before adding or replacing a sub-processor, and you may object on reasonable data-protection grounds. We remain liable for our sub-processors' compliance.
This page lists sub-processors used to run the v6o analytics service. The marketing website itself sets no cookies and shares data with no third party beyond what's needed to send you an email if you contact us.