Legal
Subprocessors
Companies that process personal information so SortProof can run. This list matches the live service.
Last updated 22 October 2026.
We update this page before a new company starts processing personal information. The privacy notice explains the reasons and the international transfers.
| Provider | Purpose | Region |
|---|---|---|
| DigitalOcean, LLC | Application hosting, Managed PostgreSQL, and Managed Valkey | London (LON1) |
| DigitalOcean Spaces | Private storage for documents, packs, and exports. Encrypted database backups. | Files in London (LON1). Backups in Amsterdam (AMS3). |
| Postmark (ActiveCampaign, LLC) | Transactional email, including sign-in links, receipts, and product notices | United States |
| Stripe, Inc. and Stripe Payments Europe, Limited | Card payments, subscriptions, the customer portal, and payment webhooks. Stripe is its own controller for the card number. | European Union and United States |
| Cloudflare, Inc. | DNS, firewall, and Turnstile checks on public forms | Global network |
| Functional Software, Inc. (Sentry) | Error reports, which can include a page address and a technical message | The project region is not stated on this page |
| Companies House | Public company lookup while an organisation is created. The lookup sends the name or number you type. | United Kingdom |
| ClamAV, run by us | Malware scanning of uploads, on a scanner in the same environment. This is not a separate company. | London, with the application |
| In-product assistant | The assistant answers from the current organisation’s record. Questions and answers are kept for 90 days. The provider in use does not send the question to another company. A named model provider will be added to this table before it is switched on. | On our network |