Sub-processors
Last updated: 22 October 2026
Draft: this document is being reviewed by our solicitor and may change before launch.
1. Providers we use
These providers help us run Fenquist. Each has a contract that protects your data. We email account owners at least 30 days before adding or replacing one.
| Provider | What for | Data | Where | When |
|---|---|---|---|---|
| Amazon Web Services | Hosting, database, file storage, logs and backups | All account and business data | Stockholm, Sweden (EU) | Always |
| Cloudflare | Network security, DNS and delivery | Requests passing through (IP address, page requested) | Global network, UK/EU where possible | Always |
| Resend | Sending emails: invoices, reminders, sign-in and account emails | Email addresses, names, email content | United States | Always |
| Stripe | Card and bank payments from your clients; your Fenquist subscription | Payer and payment details | UK, EU and United States (independent controller for payment data) | When payments are taken |
| Website analytics (Tag Manager, Analytics); Sign in with Google | Website usage after consent; name and email for sign-in | United States | Analytics only after consent; sign-in only if chosen | |
| Microsoft | Sign in with Microsoft | Name and email | EU and United States | Only if you choose it |
| Anthropic | AI receipt reading | Receipt images | United States | Only when AI receipt reading is switched on |
| Xero, Intuit (QuickBooks), FreeAgent | Accounting connections | Invoices, clients and payments you choose to sync | UK, EU and United States | Only if you connect them |
2. Public lookups
When you look something up, these services receive only the number or postcode being checked, never your account data:
- Companies House (company numbers and names)
- HMRC and the EU VAT checker, VIES (VAT numbers)
- postcodes.io (UK postcodes)
- Frankfurter (currency exchange rates, no personal data)