Subprocessors
The third parties that process customer personal data on our behalf to provide Reguard AI.
Last updated: Draft, November 2026
Draft: pending legal review. This document is a working draft and is not yet binding. Placeholders in [SQUARE BRACKETS] will be completed before launch.
[COMPANY NAME] Ltd engages the subprocessors below to help provide Reguard AI. Each is bound by written data protection terms that are no less protective than those in our Data Processing Addendum.
Current subprocessors
| Subprocessor | Purpose | Data processed | Location | Transfer mechanism |
|---|---|---|---|---|
| Amazon Web Services EMEA SARL | Cloud hosting, database and file storage | All Customer Content (encrypted at the field level) and account data | United Kingdom (London, eu-west-2) | Not applicable: data hosted in the UK |
| Anthropic PBC | AI processing: classifying questions and drafting answers | Question text and relevant extracts from the customer's organisation profile and answer bank, and the generated output | United States | UK IDTA / UK Addendum and EU Standard Contractual Clauses [TO CONFIRM] |
Data sent to Anthropic is sent through its commercial API. Under Anthropic's commercial terms, API data is not used to train its models, and it is retained by Anthropic only in line with its commercial API data-retention policy.
Other service providers
Payments will be handled by [PAYMENT PROVIDER: TBC]. This page will be updated with its details once billing is introduced. Payment providers process billing data for which we are the controller, as described in our Privacy Policy, rather than Customer Content.
Changes to this list
Before we add or replace a subprocessor that will process Customer Personal Data, we will update this page and give at least [NOTICE PERIOD] notice by email to account Admins. [NOTIFICATION MECHANISM, TBC: the Service does not yet send email.]
You may object to a new subprocessor on reasonable data protection grounds within the notice period by contacting [PRIVACY EMAIL]. How objections are handled is set out in section 5 of our Data Processing Addendum.
Contact
Questions about our subprocessors can be sent to [PRIVACY EMAIL].