Subprocessor notice

Service providers used for secure operations.

This page lists the main service-provider categories used to run enquiries, signed upload links, legal-signing pages, email notices, secure delivery, and supporting business operations.

Last updated: 14 June 2026.

Cloudflare

Used for website hosting, signed upload and delivery endpoints, private R2 object storage, legal-signing page support, transfer metadata, and security controls.

Email providers

Gmail and Resend may be used for operator email, client notices, signed-copy emails, workflow notifications, and business correspondence.

Local operator systems

Client workspaces, generated reports, run evidence, and imported signed documents are handled in operator-controlled local storage according to the agreed retention period.

When providers are used

  • To host public website pages and invite-only workflow pages.
  • To receive files through signed upload links and private object storage.
  • To deliver signed documents, notifications, or delivery links by email.
  • To hold transfer and deletion evidence for agreed retention workflows.

Client dataset limits

Standard work does not require clients to email production data. Restricted data categories are outside standard scope unless explicitly agreed before transfer. Delivery packages are signed for integrity, and high-sensitivity delivery requires encrypted delivery mode or another agreed confidential transfer route.

Questions or objections

If a client needs a different provider position, a shorter retention period, or a different transfer route, raise it before uploading live data so the engagement can be reviewed and documented.