Sub-processors
The third parties we use to help run the service, what each does, where it is and the safeguard for any transfer.
Last updated: 13 October 2026
About this list
This list supports our privacy notice and data processing terms. Each provider is bound by contract to protect your data and use it only on our instructions. We notify customers of material changes and, under the data processing terms, give a window to object before a new sub-processor begins processing customer data.
Core providers
These are always part of the service.
| Provider | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| European cloud infrastructure provider | Application & database hosting and storage, including schedule data | EEA (Germany) | UK adequacy (EEA) |
| Stripe | Card payments for case passes (card details held by Stripe, not by us; Stripe is a controller in its own right for card data) | USA / EEA | SCCs + UK IDTA Addendum |
| Resend | Transactional email delivery (sign-in links) | USA | SCCs + UK IDTA Addendum |
Optional providers
These process data only where you choose to sign in with them.
| Provider | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Where you sign in with Google | UK / EEA / USA | Adequacy / SCCs | |
| Microsoft | Where you sign in with Microsoft | UK / EEA / USA | Adequacy / SCCs |
Not sub-processors
Website statistics are collected by Umami, which we host ourselves on our own infrastructure. It sets no cookies and records no personal data. Schedule data is not sent to Stripe, Resend, Google or Microsoft.
Questions
For questions about our sub-processors, or to be notified of changes, contact privacy@posttime.uk.
Contains public sector information licensed under the Open Government Licence v3.0. Terms, privacy and data processing. Built by Guy Mitchell, powered by Posttime. Yeti Trading and Holding Company Limited, trading as Posttime, company number 16962101.