A sub-processor is a company that helps us run Azonation and, in doing so, handles personal data that organisations keep in Azonation. This page lists them. It is part of our data processing agreement and is referred to in our privacy notice.
Each sub-processor receives only the data it needs for its task. Each one is bound by a written contract that requires it to protect the data to the same standard as we must. Several are used only when an organisation switches on a feature.
This list is a draft: each company is to be confirmed before launch [to confirm].
Sub-processors
| Company | What it does for Azonation | What data | Where | When it applies |
|---|---|---|---|---|
| Hosting provider [to confirm] | Runs the servers and the database, and keeps the backups | All data kept in Azonation | [to confirm: planned UK or EU] | Always |
| File storage company [to confirm] | Stores uploaded files, if files move away from the hosting provider | Documents, pictures and other uploaded files | [to confirm] | Always, if used [to confirm] |
| Stripe | Card payments for our invoices; Stripe Connect, which pays members’ money into the organisation’s own Stripe account | Payer’s name and email address, payment details, amount and what the payment is for | [to confirm] | Our invoices: when an organisation pays by card. Members’ payments: only if the organisation uses the Online payments module |
| Amazon Web Services | Sends email (Simple Email Service); possibly file storage [to confirm] | Name, email address and the content of the email; uploaded files if used for storage | [to confirm] | Always (email) |
| Meta | Sends WhatsApp Business messages | Phone number, name and the content of the message | [to confirm] | Only if the organisation uses WhatsApp |
| SMS gateways, one per country [to confirm] | Send text messages | Phone number and the content of the message | [to confirm] | Only if the organisation uses SMS |
| Anthropic | AI helper: writes drafts | The notes a person types and a few facts of the record. Never contact details, payments or votes | [to confirm] | Only if the organisation switches on the AI helper |
| Apple | Wallet passes on Apple devices; push notices through the browser’s push service | The details shown on the pass; the content of the notice and the device’s push address | [to confirm] | Only if a person adds a pass or allows push notices on an Apple device or browser |
| Wallet passes on Android devices; push notices through the browser’s push service | The details shown on the pass; the content of the notice and the device’s push address | [to confirm] | Only if a person adds a pass or allows push notices on an Android device or a Google browser |
Push notices travel through the push service of the company that makes the person’s browser. For other browsers, that is the maker of that browser.
Other AI services
We may change the AI helper to another AI service, such as OpenRouter, OpenAI, Google, xAI or DeepSeek. None of them receives any data today. If we switch to one, we add it to the table above before we use it, and we announce it as described below.
International transfers
Where a sub-processor is outside the UK and the European Economic Area, we use the UK International Data Transfer Agreement or the EU Standard Contractual Clauses with the UK Addendum.
On our own website
Live chat on azonation.com, if switched on, is run by another company (Tawk.to [to confirm]). It handles what a visitor types to us, and only after the visitor says yes. It does not handle any organisation’s records, so it is not a sub-processor for organisations. The cookie notice explains it.
Services an organisation connects itself
An organisation can connect Azonation to services where it has its own account. The organisation chooses the service, agrees to that service’s terms and decides what is sent. These services are not our sub-processors:
- Zoom, Google Meet and Microsoft Teams (links for online meetings);
- Xero and QuickBooks (accounting);
- the organisation’s own Stripe account (receiving members’ payments);
- the organisation’s own web address (for its website).
The organisation is responsible for its use of these services, including what it tells its members about them.
How we announce changes
Before we add a sub-processor or replace one:
- we update this page at least 30 days before the new company starts to handle data; and
- we send an email to the admins of every organisation at least 30 days before.
An organisation that has a reasonable objection on data protection grounds can tell us within those 30 days at support@azonation.com. The data processing agreement says what happens next. For a sub-processor that applies only to an optional feature, an organisation can also simply leave the feature switched off.
Questions
Write to support@azonation.com.