{"$comment":"DATA-17, AUD-13: the machine readable sub-processor list for each region. It is the source of the supplier register. Each change gets a new version. DATA-17: the control worker announces each new version one time, by email to the Owners and Admins of each Organisation and by a signed webhook (AnnounceSubprocessorChange). The notice period before a change applies is a contract term (a person sets it).","version":"2026-10-17","regions":{"uk-south":[{"name":"Microsoft Azure","purpose":"Hosting of the cell: compute, database, object storage, backups, keys","location":"United Kingdom (UK South, UK West)","dataTypes":["database","objects","backups","logs"],"transferBasis":"none (in jurisdiction)"},{"name":"Anthropic Claude (through an in-region endpoint, D-011)","purpose":"AI review of the redacted view of transactions; zero retention; no training","location":"United Kingdom","dataTypes":["ai"],"transferBasis":"none (in jurisdiction)","status":"to confirm: provider, region and contract terms before go-live (risk R7)"},{"name":"SMTP email provider (to choose)","purpose":"Emails to the firm and to its clients","location":"United Kingdom","dataTypes":["email"],"transferBasis":"none (in jurisdiction)","status":"to choose before go-live"}]},"controlPlane":[{"name":"Microsoft Azure","purpose":"Hosting of the control plane: identity, billing counts","location":"United Kingdom","dataTypes":["identity","billing"],"transferBasis":"none (in jurisdiction)"},{"name":"GitHub","purpose":"Source code and CI. No customer data","location":"United States","dataTypes":[],"transferBasis":"not applicable (no personal data of customers)"}]}