Legal
Sub-processors
Datuma uses the following sub-processors to deliver the service. Each is bound by data-processing terms appropriate to the data they handle.
Current sub-processors
| Sub-processor | Purpose | Region |
|---|---|---|
| Supabase | Application database (Postgres), Edge Functions, authentication | EU (Frankfurt) |
| Resend | Transactional email delivery | EU |
| Netlify | Marketing site and portal static hosting | Global CDN |
| GoCardless | Direct Debit processing and payment collection | UK and EU |
| Contact-data enrichment provider | LinkedIn profile lookup, work-email deliverability check, contact verification | US (under DPA with EU Standard Contractual Clauses and UK International Data Transfer Addendum) |
Changes
We notify customers of material sub-processor additions via email at least 30 days in advance. The specific name of the contact-data enrichment provider, along with details of its transitive sub-processors, is available on request to active customers and prospects with a signed non-disclosure agreement. Write to support@datuma.co.uk for these details or a copy of our Data Processing Addendum.
Related policies
For the full description of how personal data is processed, see the Privacy Policy. For technical controls, see the Security page. For the terms governing the free demo, see the Terms of Service.