Saundy uses the following sub-processors to provide the Service. This page is the authoritative list referenced by our Privacy Policy and Data Processing Agreement. Changes are announced as described in the DPA, and the "Last updated" date above changes whenever this list does.
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Microsoft | Cloud hosting of the Service and database | All service data, including inspection content and photos | United Kingdom (Azure UK West) |
| Microsoft (Graph / Microsoft 365) | Transactional email delivery (welcome, password reset, invitations) and register-interest notifications | Recipient name and email address, email content, register-interest submissions (name, email, company) | United Kingdom (Microsoft 365 UK datacentre region) |
| Stripe | Subscription billing, report-pack payments, and payment processing | Billing contact details, payment card data (never stored by Saundy) | US / EU (Stripe's infrastructure) |
| Anthropic (only when your organisation uses an AI feature) | The Service's optional AI-assisted features, including template drafting: the "Saundy" assistant on the template builder and its conversion of documents you upload into templates | The content your organisation submits to the feature it is using. For template drafting that is the template's name, structure, and questions, the messages typed to the assistant, and documents uploaded for conversion; for a requested review of a submitted report, the report's answers and photos and your organisation's severity rules | US |
Notes:
- All websites and the portal serve fonts, styles, and scripts from Saundy's own domains, so no CDN or analytics providers receive visitor data.
- AI features are optional, and processing is always initiated by your organisation using one: nothing is sent to Anthropic in the background of normal use, and only the content the feature needs is sent. What AI features produce is advisory — drafts and suggestions take effect only once your organisation reviews and accepts them. Anthropic does not use data submitted through its API to train its models.
- To show distances for job assignment, our servers look postcodes up against postcodes.io, an open geocoding service built on Office for National Statistics and Ordnance Survey data published under the Open Government Licence. Each lookup contains a bare postcode and nothing else — no names, account identifiers, or user network addresses — so no personal data is disclosed and postcodes.io is not a sub-processor. It is listed here for transparency only.
- Hosting and transactional email stay in the United Kingdom. Where a sub-processor processes data outside the UK (Stripe, Anthropic), the transfer is safeguarded by that provider's data processing terms, which incorporate the UK Addendum to the EU Standard Contractual Clauses or the UK International Data Transfer Agreement.