Data processors
Poyntr engages a small set of third-party data processors to deliver the service, categories include cloud hosting, encrypted database, vector store, large language model inference, voice services, payments, and transactional email. The full register, with each processor’s purpose, country, data categories, and transfer mechanism, is provided to controllers under a signed Data Processing Agreement.
We do not publish the register publicly. This preserves the supply-chain reconnaissance surface and matches our obligation under UK GDPR Article 28(2), which is to inform controllers of sub-processors and offer an opportunity to object, not to index the list for the open web.
To request the register, email [email protected] from a verified institutional address. We return the register under the same DPA that governs your engagement and notify subscribed controllers at least 30 days in advance of any change.
Last reviewed: 2026-05-18 · Data Processing Agreement · [email protected]
Institutional administrators and enterprise compliance contacts are notified by email at least 30 days before any new sub-processor begins processing personal data. The notification includes the processor category, the purpose, the data categories involved, and the transfer mechanism. Controllers may object during that window; objections are addressed bilaterally per the DPA.
To subscribe to sub-processor change notifications, email [email protected] from a verified institutional address.