Sub-processors
Last updated 14 October 2026
These are the companies that handle personal data for us so that ActivityRoster can run. Each has a data processing agreement with us and, where it is outside the UK and EU, standard contractual clauses. We tell every centre before a new sub-processor starts handling their data, with at least 30 days to raise a concern, and we record every change below. Questions to privacy@activityroster.com.
| Company | What it does for us | Data involved | Where | Status |
|---|---|---|---|---|
| Cloudflare, Inc. | Hosting, database, file storage, cache, DNS and TLS | All platform data | EU (database in western Europe, files in the EU jurisdiction); worldwide edge network for serving requests | In use |
| Resend, Inc. | Transactional and outreach email | Recipient email addresses and the content of the emails we send (sign-in codes, invitations, roster notices) | EU region | In use |
| ActiveCampaign, LLC (Postmark) | Backup email provider, used only if Resend fails | The same as Resend | United States, under EU standard contractual clauses | Standby |
| Stripe Payments Europe, Ltd. | Subscription billing | Billing contact name and email, invoices; card details never reach us | EU / United States | In use |
| Functional Software, Inc. (Sentry) | Error monitoring | Error traces with emails and tokens removed before they are sent | EU | In use |
| Better Stack, Inc. | Uptime monitoring and the public status page | None of centres' data; it fetches our health page and holds the owner's alert contact | EU / United States | In use |
| Backblaze, Inc. (B2) | Second, off-Cloudflare copy of encrypted nightly backups | Encrypted database exports and document archives only | EU | In use |
| Anthropic, PBC | Drafts our own business-to-business outreach emails to prospective centres | Prospect business names, their public website text and business contact names. Never any centre's users, staff or students | United States | In use |
| Google LLC (Firebase Cloud Messaging) | Delivers phone notifications from the instructor app | The phone's notification token and the notification text (for example a shift change: course, day and time) | United States / worldwide, under EU standard contractual clauses | Standby |
| Apple Inc. (Apple Push Notification service) | Delivers the app's phone notifications to iPhones (passed on by Firebase) | The same as Firebase: the phone's token and the notification text | United States / worldwide, under EU standard contractual clauses | Standby |
| GitHub, Inc. | Source code, testing and deployment automation | Code and configuration only; no personal data by policy | United States / EU | In use |
| Have I Been Pwned | Checks a new password against known breaches | The first five characters of the password's hash only; never the password or who it belongs to | Cloudflare edge | In use |
Changes
- 14 October 2026Google (Firebase Cloud Messaging) and Apple (push service) listed ahead of use for the instructor app's phone notifications; they become live only after centres have been told.
- 3 October 2026Postmark listed as a standby email provider ahead of use; it becomes live only if Resend fails and only after centres have been told.
- 3 October 2026Backblaze B2 added for the off-Cloudflare copy of encrypted backups; Better Stack added for uptime monitoring.
- 29 September 2026Register first published: Cloudflare, Resend, Stripe, Sentry, Anthropic (outreach only), GitHub, Have I Been Pwned.
See also our privacy policy, data processing terms and security overview.
This page is a plain-English summary provided for transparency and is not legal advice. Have your final documents reviewed by a solicitor before relying on them commercially.