Sub-processors
Last updated 26 Sept 2026
The companies that help us run Stedwise, what each one processes, and where. We tell customers before adding or replacing a sub-processor.
| Sub-processor | Purpose | Data | Region |
|---|---|---|---|
| Vercel | Purpose Hosting: runs the Stedwise website and application | Data All customer data passes through it while a page or action is handled; nothing is stored there | Region Runs in London (lhr1). Vercel Inc. is US-based; transfers are covered by the UK Addendum to the EU standard contractual clauses. |
| Neon | Purpose Database, including uploaded files and backups | Data All customer data, including encrypted special category records | Region United Kingdom (AWS London, eu-west-2). All data and backups stay in the UK. |
| Resend | Purpose Sign-in links, alerts, weekly digests and readiness reports | Data Recipient email address and message content. Emails never contain resident records. | Region European Union (Ireland, eu-west-1). Resend Inc. is US-based; transfers are covered by the UK Addendum to the EU standard contractual clauses. |
| Cloudflare | Purpose Domain name service, and forwarding email sent to @stedwise.co.uk addresses | Data Email sent to Stedwise addresses while it is forwarded. No customer records. | Region Global network; Cloudflare Inc. is US-based, with UK transfer safeguards. |
| Stripe | Purpose Payments and subscriptions | Data Billing contact, subscription and payment details. Card details go directly to Stripe and never reach Stedwise. | Region Under Stripe’s own terms, with UK transfer safeguards. |
| AI model provider (to be named before use) | Purpose Checking organisational documents against criteria, and drafting obligations from public government text | Data Organisational documents that have passed a personal-data screen, and public government text. Never resident, staff, referral or incident records. | Region Must name its processing region (UK or EU), retain nothing and not train on customer data. Named here before it is used. |
Where a provider is marked “to be named”, Stedwise does not use that kind of processing until the provider is chosen, meets the region requirement shown, and is listed here.
Questions about this page: hello@stedwise.co.uk.