Sub-processors

A sub-processor is a third party that processes personal data on our behalf while we provide one of our products to you. The provider below is used by every product. It works under a written contract that imposes data protection obligations equivalent to those in our data processing agreement with you, and we remain responsible to you for its work.

• Amazon Web Services

  Amazon Web Services EMEA SARL

  United Kingdom

  Hosts our products in the UK: application servers, databases, file storage and backups, and the system email our products send, such as invitations, notifications and password resets.

  Data processed

  All customer data held in our products, including uploaded files, and the recipient addresses and content of system email.

  Transfer safeguard

  None needed for data stored and processed in the UK. Where a product uses a provider or service outside the UK, its own list names it with the safeguard.

Some products use further providers for particular features, such as the AI features in CubeMSP. Each product names every sub-processor it uses, with what it does, what it processes and where, on its own site.

These are not sub-processors. When you connect a service to one of our products, such as an accounting package, a web shop or Microsoft 365, data passes between them at your direction, and you have your own agreement with that provider. Each product lists the connections it offers.

This website is separate from our products. It uses Google Analytics, only if you allow it, which may process data in the United States, and Amazon SES, in the UK, to deliver enquiries to us. For those we are the controller rather than a processor, so they are covered by our privacy policy and cookie policy rather than this list.

Before we add or replace a sub-processor, we email the nominated contact at every customer affected, within the notice period in that product’s terms, and update the list and its change log. The notice says who the provider is, what it will do, and where.

If you object on reasonable data protection grounds, tell us within that period at hello@cubesystems.co.uk. We will work with you to find a solution and, if we cannot, you may end the affected part of the service. Anyone who is not a customer but would like to hear about changes can ask to be added to the notification list.